Troubleshooting
Problem
Issuing console command D IOS,EKM,VERIFY=ALL results in IOS627E error messages when preparing for IBM Security Key Lifecycle Manager.
Symptom
Full error message:
IOS627E PRIMARY INTERFACE WITH ENCRYPTION KEY MANAGER CANNOT BE
CONNECTED DUE TO SOCKET FAILURE
RETVAL=FFFFFFFF ERRNO=00000468 ERRNOJR=76630291
Errno x'0468' means ECONNREFUSED and this means there is no active listening port for the incoming TCP connection request.
Environment
z/OS
Diagnosing The Problem
IOS will not be able to connect with any encryption key manager until ISKLM is up and running.
Resolving The Problem
Once ISKLM is up and running, issuing D IOS,EKM,VERIFY=ALL will show the following messages:
D IOS,EKM,VERIFY=ALL
IOS099I 15.46.08 EKM HOSTS
PRIMARY HOSTNAME=99.9.9.99:3801
SECONDARY HOSTNAME=99.9.99.999:3801
MAX CONNECTIONS = 255, PERMANENT CONNECTIONS = 008
VERIFICATION WILL COMPLETE ASYNCHRONOUSLY
IOS631I PRIMARY ENCRYPTION KEY MANAGER WAS SUCCESSFULLY CONNECTED
IOS627E SECONDARY INTERFACE WITH ENCRYPTION KEY MANAGER CANNOT BE
CONNECTED DUE TO SOCKET FAILURE
RETVAL=FFFFFFFF ERRNO=00000468 ERRNOJR=76630291
In the above example, ISKLM was only set up on the primary system and not on the secondary system hence the IOS627E for the secondary interface while the primary is now OK.
[{"Product":{"code":"SSAMDD","label":"IBM Security Key Lifecycle Manager for z\/OS"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF035","label":"z\/OS"}],"Version":"1.1.0","Edition":"Enterprise","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg21504855