EZD2026I

Explanation
The AT-TLS group group_name is
configured with FIPS140 On. Tcpname received an
error from the System SSL Certificate Management Services (CMS) API
gsk_fips_state_set. The gsk_fips_state_set API is documented in z/OS Cryptographic Services System SSL Programming. AT-TLS services are not available for group_name.
In
the message text:Tcpname
The name of the TCPIP stack
group_name
The name of the AT-TLS group that is specified on a TTLSGroupAction
statement
gsk_status
The hexadecimal gsk_status code that is returned from gsk_fips_state_set()
description
Describes the meaning of gsk_status

System action
 TCPIP continues. AT-TLS services are not available
for the AT-TLS group specified by the group_name value.

Operator response
 Contact the system programmer.

System programmer response
 For more information about the error,
see CMS status codes in z/OS Cryptographic Services System SSL Programming. If the CSFSERV resource class is active,
review RACF® CSFSERV resource
requirements in z/OS Cryptographic Services System SSL Programming and ensure that the
user ID for Tcpname has access to the appropriate
resources in this class.

User response
 None.

Problem determination
 See the system programmer response.

Source
 z/OS® Communications
Server TCP/IP

Module
 EZBTLCMN

Routing code
 2, 8

Descriptor code
 12

Automation
 This message goes to the console. Automation can
notify the system programmer.

Example
 EZD2026I TCPCS GSK_FIPS_STATE_SET FAILED FOR AT-TLS GROUP grp3 WITH RETURN CODE 0335308A Known Answer Test 
has failed when attempting to use ICSF 