z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZD1919I

z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
SC27-3655-01

EZD1919I
FIPS140 support is enabled for the IKE daemon but it has read access to CRYPTOZ resource FIPSEXEMPT.SYSTOK-SESSION-ONLY

Explanation

When the IKE daemon is configured for Federal Information Processing Standard 140 (FIPS 140) mode, the IKE daemon must have no access privileges (NONE) to the SAF resource FIPSEXEMPT.SYSTOK-SESSION-ONLY in the CRYPTOZ class.

See the FIPS140 parameter in z/OS Communications Server: IP Configuration Reference for information about configuring FIPS 140.

System action

The IKE daemon ends.

Operator response

Contact the system programmer.

System programmer response

Remove IKE daemon access to the SAF resource, or disable FIPS 140 mode for the IKE daemon. See the FIPS140 parameter in z/OS Communications Server: IP Configuration Reference for about configuring FIPS 140.

User response

Not applicable.

Problem determination

None.

Source

z/OS® Communications Server TCP/IP: IKE daemon

Module

ike_config.cpp

Routing code

11

Descriptor code

7

Automation

This message is written to the MVS™ console and to syslog. This message is a good candidate for automation.

Example

Not applicable.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014