ICSFMIG_DEPRECATED_SERV

Description:

Detects the use of services which will not be supported in subsequent releases of ICSF. This check is inactive when ICSF is started it must be activated to perform the check. Once activated the check will be performed on a daily basis.

Reason for check:

Subsequent releases of ICSF will not support the use of certain callable services. This check provides a way to detect if any applications are currently using these services.

The deprecated services checked in ICSF FMID HCR77A0 (z/OS® V2R1) are listed below. These are not supported after System z 900 hardware.

CSFAEGN
CSFAKEX
CSFAKIM
CSFAKTR
CSFATKN
CSFCTT
CSFCTT1
CSFTCK
CSFUDK
CSFPKSC

z/OS releases the check applies to:

ICSF FMID HCR77A0 or later running on z/OS V1R12, z/OS V1R13 or z/OS V2R1

Type of check (local or remote):

Local

User override of IBM® values:

The following shows keywords you can use to override check values on either a POLICY statement in the HZSPRMxx parmlib member or on a MODIFY command. This statement may be copied and modified to override the check defaults:

UPDATE
CHECK(IBMICSF,ICSFMIG_DEPRECATED_SERV_WARNINGS)
INACTIVE
SEVERITY(LOW) INTERVAL(ONETIME) DATE('date_of_the_change')
REASON('Your reason for making the update.'))

Parameters accepted:

No.

Verbose support:

Debug support:

Reference:

For more information see z/OS Cryptographic Services ICSF Application Programmer's Guide.

Messages:

This check issues the following exception messages:

CSFH0011I

See in z/OS Cryptographic Services ICSF Messages.

SECLABEL recommended for multilevel security users:

SYSLOW - see z/OS Planning for Multilevel Security and the Common Criteria for information on using SECLABELs.