IKYS015I RACF callable service, R_datalib, with function code nnnn returns with SAF return code=nnnn, RACF return code=nnnn, RACF reason code=nnnn
Explanation
PKI Services is attempting
to retrieve data from the SAF key ring specified by the KeyRing value in the SAF section of the pkiserv.conf file. The key ring specified does not appear to be set up properly.
Possible problems are:
- Key ring is empty.
- CA certificate in the key ring not connected as PERSONAL DEFAULT.
- CA certificate in key ring has no private key.
- User ID assigned to the PKI Services daemon has insufficient authority to read the key ring or private key.
System action
PKI Services stops.
System programmer response
Look up the return and reason code displayed in z/OS Security Server RACF Callable Services. Make corrections as needed. Ensure that the SAF key ring and the certificate stored in it are correct. For more information, see RACF administration for PKI Services and z/OS Security Server RACF Security Administrator's Guide.