IOS628E
ENCRYPTION ON DEVICE dddd HAS FAILED DUE TO text

Explanation

Communication with the encryption key manager (EKM) has failed to retrieve the key after a predetermined time limit.

In the message text:
dddd
The device number.
text
The text can be one of the following reasons:
KEY MANAGER NOT SPECIFIED
A key manager was not specified at the time of key exchange.
SOCKET FAILURE RETVAL=retval ERRNO=errno ERRNOJR=errnojr
Encryption key manager processing failed to open a TCP/IP connection to the encryption key manager. retval, errno and errnojr are the return values from the USS service that failed.
CONNECTION FAILURE SOCKET ERNO=xxxx
Encryption key manager processing failed to open a TCP/IP connection to the encryption key manager. xxxx is the return code from the USS service that has failed.
COMMUNICATION TIME OUT
Encryption key manager processing communication reached a TCP/IP timeout.
INCORRECT DATA RECEIVED
There was an internal error communicating with the encryption key manager and the tape drive.
IO ERROR
An unrecoverable I/O error was encountered.
USS FAILURE
A failure in using USS services has prevented encryption.
ENCRYPTION STATUS NOT RETURNED
A hardware error has occurred. A key exchange was requested, however the encryption status message was not returned by the control unit.
PIN FAILURE
A software error has occurred.
OMVS SEGMENT FAILURE FOR IOSAS
The IOS address space (IOSAS) has determined that USS services could not be used due to a lack of permissions for IOSAS.

System action

The system will still attempt connections with the primary or secondary host names in case the error is temporary.

Operator response

If the host name is in error, issue a SETIOS EKM command to specify a correct encryption key manager or NONE to disable in-band key management. Contact the system programmer to verify that the encryption key manager is currently running and TCP/IP and USS work correctly.

System programmer response

To determine the reason for the socket failure see z/OS UNIX System Services Messages and Codes or z/OS Communications Server: IP Diagnosis Guide.

For USS FAILURE, verify that USS is active.

For OMVS SEGMENT FAILURE FOR IOSAS, verify that IOSAS has permissions to an OMVS segment and the security product is running.

Source

Input/output supervisor (IOS)

Routing code

2,10

Descriptor code

5