Technote (troubleshooting)
Problem(Abstract)
Attempts to D IOS,EKM,VERIFY=ALL result in IOS627E error messages when preparing for IBM Security Key Lifecycle Manager.
Symptom
Full error message:
IOS627E PRIMARY INTERFACE WITH ENCRYPTION KEY MANAGER CANNOT BE
CONNECTED DUE TO SOCKET FAILURE
RETVAL=FFFFFFFF ERRNO=00000468 ERRNOJR=76630291
Environment
z/OS
Diagnosing the problem
IOS will not be able to connect with any encryption key manager until ISKLM is up and running.
Resolving the problem
Once ISKLM is up and running, issuing D IOS,EKM,VERIFY=ALL will show the following messages:
D IOS,EKM,VERIFY=ALL
IOS099I 15.46.08 EKM HOSTS
PRIMARY HOSTNAME=99.9.9.99:3801
SECONDARY HOSTNAME=99.9.99.999:3801
MAX CONNECTIONS = 255, PERMANENT CONNECTIONS = 008
VERIFICATION WILL COMPLETE ASYNCHRONOUSLY
IOS631I PRIMARY ENCRYPTION KEY MANAGER WAS SUCCESSFULLY CONNECTED
IOS627E SECONDARY INTERFACE WITH ENCRYPTION KEY MANAGER CANNOT BE
CONNECTED DUE TO SOCKET FAILURE
RETVAL=FFFFFFFF ERRNO=00000468 ERRNOJR=76630291
In the above example, ISKLM was only set up on the primary system and not on the secondary system.
Rate this page:
Copyright and trademark information
IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.