D IOS during ISKLM installation shows socket error

Technote (troubleshooting)


Problem(Abstract)

Attempts to D IOS,EKM,VERIFY=ALL result in IOS627E error messages when preparing for IBM Security Key Lifecycle Manager.

Symptom

Full error message:

IOS627E PRIMARY INTERFACE WITH ENCRYPTION KEY MANAGER CANNOT BE
CONNECTED DUE TO SOCKET FAILURE
RETVAL=FFFFFFFF ERRNO=00000468 ERRNOJR=76630291

Errno x'0468' means ECONNREFUSED and this means there is no active listening port for the incoming TCP connection request.



Environment

z/OS

Diagnosing the problem

IOS will not be able to connect with any encryption key manager until ISKLM is up and running.

Resolving the problem

Once ISKLM is up and running, issuing D IOS,EKM,VERIFY=ALL will show the following messages:

D IOS,EKM,VERIFY=ALL
IOS099I 15.46.08 EKM HOSTS
PRIMARY HOSTNAME=99.9.9.99:3801
SECONDARY HOSTNAME=99.9.99.999:3801
MAX CONNECTIONS = 255, PERMANENT CONNECTIONS = 008
VERIFICATION WILL COMPLETE ASYNCHRONOUSLY
IOS631I PRIMARY ENCRYPTION KEY MANAGER WAS SUCCESSFULLY CONNECTED
IOS627E SECONDARY INTERFACE WITH ENCRYPTION KEY MANAGER CANNOT BE
CONNECTED DUE TO SOCKET FAILURE
RETVAL=FFFFFFFF ERRNO=00000468 ERRNOJR=76630291

In the above example, ISKLM was only set up on the primary system and not on the secondary system hence the IOS627E for the secondary interface while the primary is now OK.


Rate this page:

(0 users)Average rating

Add comments

Document information


More support for:

IBM Security Key Lifecycle Manager for z/OS

Software version:

1.1

Operating system(s):

z/OS

Software edition:

Enterprise

Reference #:

1504855

Modified date:

2013-06-05

Translate my page

Machine Translation

Content navigation