IBM Support

PI55772: NEW IMS ENCRYPTION EXIT TO ADD A PERFORMANCE ENHANCEMENT FOR IMSBATCH DLI APPLICATIONS.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as new function.

Error description

  • New IMS encryption exit to add a performance enhancement for IMS
    Batch DLI applications.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All IBM InfoSphere Guardium Data Encryption  *
    *                 for DB2 and IMS Databases Version 1 Release  *
    *                 2 users.                                     *
    ****************************************************************
    * PROBLEM DESCRIPTION: New IMS encryption exit to add a        *
    *                      performance enhancement for IMS Batch   *
    *                      DLI applications. (PI55772)             *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    New IMS encryption exit to add a performance enhancement for IMS
    Batch DLI applications.
    

Problem conclusion

Temporary fix

Comments

  • 1. After successful SMP/E apply, the Module DECENBB1 is
    introduced and Module DECENAA1 is updated.  These are being
    provided for performance enhancements.
    2. After successful SMP/E apply, if Customer wishes to use the
    DECENAA1 or DECENBB1 Modules, they should execute the necessary
    link samplib member and verify that their IMS Exit library is
    refreshed. Execute DECIMSCB, for DECENAA1 or DECENBB1.
    3. After successful SMP/E apply, the samplib member DECIMSCB
    is updated.  It now allows link for both DECENAA1 and DECENBB1,
    as well as instructional comments on how to use DECSSI10.
    4. Customer should note that changes have been made to the ISPF
    dialog s SDECPLIB, SDECSLIB and SDECCEXE libraries, to
    accommodate using DECENBB1, via the ISPF panel DECPI0.
    5. Customer should note that IMS Exits, linked with DECENBB1,
    which use an Error Key, will have new error messages, which
    indicate the problem cause, issued either in the DLI Batch
    Output, or for BMP - issued in the IMS DLI and System Log
    outputs.  The Messages:  DEC0001E, DEC0002E, DEC0003E, DEC0004E,
    DEC0005E, and DEC0006E.
    6. If Customer wishes to use either DECENAA1 or DECENBB1, along
    with the DECSSI10 Modules, then proceed to step 7., else
    stop here.
    7. Post SMP/E apply, If Customer wishes to use the DECENAA1
    or DECENBB1 exit, Customer should execute the updated samplib
    member, DECIMSCB, to link for the DECENAA1 module, or the new
    IMS Module DECENBB1.
    8. After successful linking of the DEC V1.2 DECENAA1 or
    DECENBB1 Module, for this APAR, Customer should do either
    of the following actions:
    a.  Determine if the IMS EXIT library, for the IMS Subsystem
    where DEC V1.2 is used, is in the System Linklist
    concatenation. If so,issue the LLA Refresh command on that
    System LPAR. This will allow Customer to use the updated code,
    without need to Cycle the IMS Subsystem.
    b.  If the IMS EXIT library, for the IMS Subsystem where
    DEC V1.2 is used, is not in the System Linklist concatenation,
    Customer will need to Cycle the IMS Subsystem, in order to use
    the updated code.
    9.Customer should note the Instructional Comments, in samplib
    member DECIMSCB, on how to activate the Exit named DECSSI10.
    This is a Required Prerequisite step for DECENAA1 or DECENBB1
    successful use.
    Customer can choose to perform this activation in either a
    Dynamic or Static mode.
    NOTE:  The Encryption Tool subsystem interface must be
    installed on each z/OS system in the sysplex where DL/I
    batch jobs are executed.
    
    Dynamic installation
    Install the subsystem by issuing z/OS commands SETPROG and
    SETSSI.
    With a dynamic installation, you are not required to IPL the
    system to activate the subsystem interface. However, because
    the subsystem interface persists for the current IPL only, you
    must reinstall the subsystem interface after an IPL.
    
    Procedure
    A. Issue the SETPROG command from the z/OS console to add the
    Encryption Tool subsystem module DECSSI10 to LPA:
    SETPROG LPA,ADD,MODNAME=DECSSI10,DSNAME=smqhlq.SDECLOAD
    where smqhlq.SDECLOAD is the name of your Encryption Tool load
    library.
    B. Issue the SETSSI command from the z/OS console to activate
    the Encryption Tool subsystem module DECSSI10:
    SETSSI ADD,SUB=subname,INITRTN=DECSSI10
    where subname is a valid and unique 4-character subsystem name
    that you choose. The subsystem name does not need to be the
    same across z/OS systems in a sysplex.
    
    Results:
    After you issue the SETSSI command, the following message is
    displayed:
    If you install the Encryption Tool subsystem interface
    dynamically, you must issue these commands after each IPL. For
    more information about the SETPROG and SETSSI commands, see
    z/OS System Commands.
    
    Static installation
    Install the subsystem by adding module DECSSI10 to the z/OS
    Link Pack Area and adding the subsystem interface definition
    to SYS1.PARMLIB subsystem definition member IEFSSNxx.
    NOTE: With a static installation, you are required to
    immediately IPL the system to activate the subsystem interface.
    The subsystem interface persists across all IPLs.
    Tip: Install the interface dynamically so that you can use
    Encryption Tool without an IPL. Then install the interface
    statically so that the subsystem interface is activated after
    each IPL.
    
    Procedure
    
    A. Add module DECSSI10 to the z/OS Link Pack Area (LPA).
    Either pageable (PLPA) or modifiable LPA can be used.
    B. Add the definition for the Encryption Tool subsystem
    interface definition to SYS1.PARMLIB subsystem definition
    member IEFSSNxx. You must use the keyword parameter form of
    the IEFSSNxx PARMLIB member for the Encryption Tool subsystem
    interface. The Encryption Tool subsystem interface uses dynamic
    SSI services that are not supported in the positional form of
    IEFSSNxx.
    The form of the definition control statement is:
    SUBSYS SUBNAME(subname) INITRTN(DECSSI10)
    where subname is a valid and unique 4-character subsystem
    name that you choose. The subname does not need to be the same
    across z/OS systems in a sysplex. For more information about
    the SUBSYS control statement, see z/OS Initialization and
    Tuning Reference.
    C. IPL the z/OS system.
    After the IPL completes processing, the following message is
    displayed:
    DEC7000I SSI INITIALIZATION COMPLETE
    
    
    User's Guide updates:
    New Messages - Coming in a Future Doc update:
    
    DEC0001E DECENxx1 encryption exit error.
    
    DEC0002E Function: funcname Function code: 000000nn
    
    DEC0003E ICSF debug data:
    
    DEC0004E Retcode: 000000xx Reason code: xxxxxxxx
    
    DEC0005E Key len: 000000xx Text length: xxxxxxxx
    
    DEC0006E The IMS U2990 message also displays a reason code.
    
    DEC7000I SSI INITIALIZATION COMPLETE
    
    DEC7002E SSI ERROR ACTION=aaaaaaaa,RC=xxxx,RSN=xxxx
    
    DEC7004I SSI PREVIOUSLY ESTABLISHED IS DISABLED
    

APAR Information

  • APAR number

    PI55772

  • Reported component name

    DATA ENCRYPTION

  • Reported component ID

    5655P0300

  • Reported release

    120

  • Status

    CLOSED UR1

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    YesSpecatt / New Function / Xsystem

  • Submitted date

    2016-01-20

  • Closed date

    2016-06-28

  • Last modified date

    2016-07-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UI38988

Modules/Macros

  • DECENAA1 DECENBB1 DECENC05 DECENC07 DECF0005
    DECF0010 DECHI0   DECIMSCB DECIMSDV DECPI0   H29F120J
    

Fix information

  • Fixed component name

    DATA ENCRYPTION

  • Fixed component ID

    5655P0300

Applicable component levels

  • R120 PSY UI38988

       UP16/06/30 P F606

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"1.2.0","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
04 July 2016