Improved FIPS 140 diagnostics

z/OS® V2R1 Communications Server provides enhanced diagnostics for the IKE and NSS daemons and the AT-TLS function when FIPS 140 processing is required.

Integrated Cryptographic Services Facility (ICSF) is required when FIPS 140 is configured for the IKE or NSS daemons or for an AT-TLS group. Starting in V2R1, these daemons and the AT-TLS groups will fail to initialize if ICSF is not active.

Dependency: NSSD, IKED, and AT-TLS Groups in FIPS140 mode require ICSF to be active at startup.

Using improved FIPS 140 diagnostics

To use improved FIPS 140 diagnostics, perform the task in Table 1.

Table 1. Improved FIPS 140 diagnostics
Task	Reference
Start NSSD, IKED or a AT-TLS group in FIPS 140 mode.	z/OS Communications Server: IP Configuration Guide