A fix is available
APAR status
Closed as new function.
Error description
New IMS encryption exit to add a performance enhancement for IMS Batch DLI applications.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All IBM InfoSphere Guardium Data Encryption * * for DB2 and IMS Databases Version 1 Release * * 2 users. * **************************************************************** * PROBLEM DESCRIPTION: New IMS encryption exit to add a * * performance enhancement for IMS Batch * * DLI applications. (PI55772) * **************************************************************** * RECOMMENDATION: * **************************************************************** New IMS encryption exit to add a performance enhancement for IMS Batch DLI applications.
Problem conclusion
Temporary fix
Comments
1. After successful SMP/E apply, the Module DECENBB1 is introduced and Module DECENAA1 is updated. These are being provided for performance enhancements. 2. After successful SMP/E apply, if Customer wishes to use the DECENAA1 or DECENBB1 Modules, they should execute the necessary link samplib member and verify that their IMS Exit library is refreshed. Execute DECIMSCB, for DECENAA1 or DECENBB1. 3. After successful SMP/E apply, the samplib member DECIMSCB is updated. It now allows link for both DECENAA1 and DECENBB1, as well as instructional comments on how to use DECSSI10. 4. Customer should note that changes have been made to the ISPF dialog s SDECPLIB, SDECSLIB and SDECCEXE libraries, to accommodate using DECENBB1, via the ISPF panel DECPI0. 5. Customer should note that IMS Exits, linked with DECENBB1, which use an Error Key, will have new error messages, which indicate the problem cause, issued either in the DLI Batch Output, or for BMP - issued in the IMS DLI and System Log outputs. The Messages: DEC0001E, DEC0002E, DEC0003E, DEC0004E, DEC0005E, and DEC0006E. 6. If Customer wishes to use either DECENAA1 or DECENBB1, along with the DECSSI10 Modules, then proceed to step 7., else stop here. 7. Post SMP/E apply, If Customer wishes to use the DECENAA1 or DECENBB1 exit, Customer should execute the updated samplib member, DECIMSCB, to link for the DECENAA1 module, or the new IMS Module DECENBB1. 8. After successful linking of the DEC V1.2 DECENAA1 or DECENBB1 Module, for this APAR, Customer should do either of the following actions: a. Determine if the IMS EXIT library, for the IMS Subsystem where DEC V1.2 is used, is in the System Linklist concatenation. If so,issue the LLA Refresh command on that System LPAR. This will allow Customer to use the updated code, without need to Cycle the IMS Subsystem. b. If the IMS EXIT library, for the IMS Subsystem where DEC V1.2 is used, is not in the System Linklist concatenation, Customer will need to Cycle the IMS Subsystem, in order to use the updated code. 9.Customer should note the Instructional Comments, in samplib member DECIMSCB, on how to activate the Exit named DECSSI10. This is a Required Prerequisite step for DECENAA1 or DECENBB1 successful use. Customer can choose to perform this activation in either a Dynamic or Static mode. NOTE: The Encryption Tool subsystem interface must be installed on each z/OS system in the sysplex where DL/I batch jobs are executed. Dynamic installation Install the subsystem by issuing z/OS commands SETPROG and SETSSI. With a dynamic installation, you are not required to IPL the system to activate the subsystem interface. However, because the subsystem interface persists for the current IPL only, you must reinstall the subsystem interface after an IPL. Procedure A. Issue the SETPROG command from the z/OS console to add the Encryption Tool subsystem module DECSSI10 to LPA: SETPROG LPA,ADD,MODNAME=DECSSI10,DSNAME=smqhlq.SDECLOAD where smqhlq.SDECLOAD is the name of your Encryption Tool load library. B. Issue the SETSSI command from the z/OS console to activate the Encryption Tool subsystem module DECSSI10: SETSSI ADD,SUB=subname,INITRTN=DECSSI10 where subname is a valid and unique 4-character subsystem name that you choose. The subsystem name does not need to be the same across z/OS systems in a sysplex. Results: After you issue the SETSSI command, the following message is displayed: If you install the Encryption Tool subsystem interface dynamically, you must issue these commands after each IPL. For more information about the SETPROG and SETSSI commands, see z/OS System Commands. Static installation Install the subsystem by adding module DECSSI10 to the z/OS Link Pack Area and adding the subsystem interface definition to SYS1.PARMLIB subsystem definition member IEFSSNxx. NOTE: With a static installation, you are required to immediately IPL the system to activate the subsystem interface. The subsystem interface persists across all IPLs. Tip: Install the interface dynamically so that you can use Encryption Tool without an IPL. Then install the interface statically so that the subsystem interface is activated after each IPL. Procedure A. Add module DECSSI10 to the z/OS Link Pack Area (LPA). Either pageable (PLPA) or modifiable LPA can be used. B. Add the definition for the Encryption Tool subsystem interface definition to SYS1.PARMLIB subsystem definition member IEFSSNxx. You must use the keyword parameter form of the IEFSSNxx PARMLIB member for the Encryption Tool subsystem interface. The Encryption Tool subsystem interface uses dynamic SSI services that are not supported in the positional form of IEFSSNxx. The form of the definition control statement is: SUBSYS SUBNAME(subname) INITRTN(DECSSI10) where subname is a valid and unique 4-character subsystem name that you choose. The subname does not need to be the same across z/OS systems in a sysplex. For more information about the SUBSYS control statement, see z/OS Initialization and Tuning Reference. C. IPL the z/OS system. After the IPL completes processing, the following message is displayed: DEC7000I SSI INITIALIZATION COMPLETE User's Guide updates: New Messages - Coming in a Future Doc update: DEC0001E DECENxx1 encryption exit error. DEC0002E Function: funcname Function code: 000000nn DEC0003E ICSF debug data: DEC0004E Retcode: 000000xx Reason code: xxxxxxxx DEC0005E Key len: 000000xx Text length: xxxxxxxx DEC0006E The IMS U2990 message also displays a reason code. DEC7000I SSI INITIALIZATION COMPLETE DEC7002E SSI ERROR ACTION=aaaaaaaa,RC=xxxx,RSN=xxxx DEC7004I SSI PREVIOUSLY ESTABLISHED IS DISABLED
APAR Information
APAR number
PI55772
Reported component name
DATA ENCRYPTION
Reported component ID
5655P0300
Reported release
120
Status
CLOSED UR1
PE
NoPE
HIPER
NoHIPER
Special Attention
YesSpecatt / New Function / Xsystem
Submitted date
2016-01-20
Closed date
2016-06-28
Last modified date
2016-07-04
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI38988
Modules/Macros
DECENAA1 DECENBB1 DECENC05 DECENC07 DECF0005 DECF0010 DECHI0 DECIMSCB DECIMSDV DECPI0 H29F120J
Fix information
Fixed component name
DATA ENCRYPTION
Fixed component ID
5655P0300
Applicable component levels
R120 PSY UI38988
UP16/06/30 P F606
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"1.2.0","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
04 July 2016