OA50450: NEW FUNCTION - PROTECTED KEY READ

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• New Function
  Support for Protected Key Read
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users in need of using protected-key CPACF.  *
  ****************************************************************
  * PROBLEM DESCRIPTION: Enhancement to ICSF callable service    *
  *                      CKDS Key Record Read2 (CSNBKRR2 and     *
  *                      CSNEKRR2) to provide support for an     *
  *                      authorized caller to retrieve the       *
  *                      protected-key CPACF form of an AES or   *
  *                      DES CCA token by label.                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  ICSF is adding support to CKDS Key Record Read2 (CSNBKRR2 and
  CSNEKRR2) for Protected Key Read to allow authorized callers to
  retrieve the protected-key CPACF form of an AES or DES CCA token
  by label.
  

Problem conclusion

Temporary fix

Comments

• Enhancement to ICSF callable service CKDS Key Record Read2
  (CSNBKRR2 or CSNEKRR2) to allow an authorized (supervisor state
  and/or system key) caller to retrieve the protected-key CPACF
  form of an AES or DES CCA token by label.
  
  A description of the enhancements for this APAR is documente
  in a PDF file, OA50450.pdf, available at
  
  ftp://public.dhe.ibm.com/eserver/zseries/zos/icsf/pdf/
    OA50450.pdf
  
  All of the enhancements included in this APAR will also be
  documented in the next release of the following ICSF
  publications:
  
  ICSF Application Programmer's Guide    SC14-7508
  ICSF Administrator's Guide             SC14-7506
  ICSF Overview                          SC14-7505
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UA82884 UA82885 UA82886 UA82887

Modules/Macros

• CSFASPB  CSFCCVE  CSFCCVT  CSFENOCC CSFENOCI
  CSFGICVE CSFGICVT CSFGISPB CSFINIT  CSFMIOPG CSFMISEC CSFNCUSK
  CSFVCENL CSFVCKR2
  

Fix information

• Fixed component name

  ICSF/MVS

• Fixed component ID

  568505101

Applicable component levels

• R7A0 PSY UA82884

     UP16/10/01 P F609

• R7A1 PSY UA82885

     UP16/10/01 P F609

• R7B0 PSY UA82886

     UP16/10/01 P F609

• R7B1 PSY UA82887

     UP16/10/01 P F609

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.