When you invoke the CSFPUTIL program as a batch job, you receive the return code in a message when the job completes. The following list describes the meanings of the return codes. Additional return codes are described in Return and reason codes for the CSFEUTIL program.

Return Code

Meaning

0

Process successful.

2

Partially successful. Job completed but some tokens have not been reenciphered.

4

Parameters are incorrect. A possible cause of the error is that the parameter 'ACTIVATE' was used. That parameter is no longer supported; use 'REFRESH'.

8

RACF authorization failed.

12, 72, or 104

PKDS processing has failed. A return code 72 indicates the error was detected with the new KDS. A return code 104 indicates the error was detected with the old KDS.

When the program is invoked from another program, the invoking program receives the reason code in General Register 0 along with the return code in General Register 15. The meaning of the reason codes are as follows:

Return code 0 has these reason codes:

Reason Code

Meaning

36137

PKDS reencipher/Change MK processed only tokens encrypted under the RSA master key.

36138

PKDS reencipher/Change MK processed only tokens encrypted under the ECC master key.

36139

PKDS reencipher/Change MK processed tokens encrypted under the RSA and ECC master keys.

Return code 8 has this reason code:

Reason Code

Meaning

3114

Another refresh utility request is executing, and this utility request will not be allowed to run.

Return code 12 has this reason code:

Reason Code

Meaning

36116

PKDS specified for reencipher or activate has incorrect dataset attribute

An abend 18F Reason code x'300' occurs with a JCL error.