IKYK002I PKCS#11 token unavailable for function-name with return code 0xnnnn . The request is not processed.
Explanation
PKI Services is calling the PKCS #11 function function-name to perform an action on a token. function-name returns a hexadecimal return code, nnnn. The
possible return codes and reasons are:
- X'00e0'
- ICSF is not active or is not configured for PKCS #11 services.
- X'00e1'
- The PKI Services daemon has insufficient authority to access the token.
System action
PKI Services does not process the request.
System programmer response
Ensure that ICSF is properly configured and operational. If the return code is X'00e1', look for the ICH408I message that is issued for insufficient authority to the CRYPTOZ class resource and give the PKI Services daemon the required access. For more information, see z/OS Cryptographic Services ICSF Writing PKCS #11 Applications.