See the information about diagnosing sysplex-wide Security Association (SWSA) problems in z/OS Communications Server: IP Diagnosis Guide for information about correcting the problem at the coupling facility. After correcting the problem at the coupling facility, you can manually refresh the SA using the ipsec command to make it available for takeover. See the information about the managing network security in z/OS Communications Server: IP System Administrator's Commands or issue the man ipsec command in a z/OS® UNIX shell to obtain information about the ipsec command syntax and options. Alternatively, you can wait for the SA to be refreshed automatically according to the configured lifetime or lifesize settings.