IKYS002I Error nnnn in OCSF-API-name
Explanation
PKI Services is calling an OCSF or OCEP API. The invocation has failed. The API name and error code encountered are displayed.
System action
If the error occurs during PKI Services initialization, PKI Services stops. Otherwise, PKI Services continues processing. However, needed cryptographic services might not be available.
System programmer response
If you are using ICSF for your CA's private key operations and the failing service is either CSP_CreateSignatureContext or CSSM_SignData, check that ICSF is functioning and configured properly for PKA operations. For this problem, you also see console message IKYP001E. Follow the instructions for message IKYP001E. For all other errors, look up the error code in either z/OS Open Cryptographic Services Facility Application Programming or Integrated Security Services Open Cryptographic Enhanced Plug-ins Application Programming. Diagnose the problem indicated by the return code. Restart PKI Services after corrections are made, if needed.