z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


EZD1923I

z/OS Communications Server: IP Messages Volume 2 (EZB, EZD)
SC27-3655-01

EZD1923I
A create signature request to the NSS server failed; no matching certificate was found for local security endpoint identity local_id and authentication method auth_method

Explanation

The IKE daemon made a network security certificate services request to create a digital signature. A certificate matching the local security endpoint identity and authentication method was not found on the network security services (NSS) server.

In the message text:
local_id
The local security endpoint identity.
auth_method
The authentication method.

System action

The request fails; the IKE daemon continues.

Operator response

Contact the system programmer.

System programmer response

If you want to use network security certificate services with the specified local security endpoint identity, add a matching certificate to the key ring of the NSS server. See the Steps for configuring the NSS server in z/OS Communications Server: IP Configuration Guide for more information.

User response

Not applicable.

Problem determination

Not Applicable.

Source

z/OS® Communications Server TCP/IP: IPSec

Module

CommonIKESA.cpp

Routing code

10

Descriptor code

12

Automation

This message is output to syslog.

Example

EZD1923I A create signature request to the NSS server failed; no matching certificate was found for local 
security endpoint identity 1.2.3.4 and authentication method RsaSignature

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014