ICH408I

Explanation
A user attempted to use the R_PKIServ callable
service function, QRECOVER, to list existing PKI Services digital
certificates that are candidates for recovery, but is not authorized
to do so.

System action
R_PKIServ processing ends. RACF® prevents the request from completing.

User response
See your security administrator.

RACF Security
Administrator Response
To avoid receiving this message ensure
that:The FACILITY class is active.
The IRR.RPKISERV.QRECOVER[.ca-domain] resource is defined in the
FACILITY class.
The IRR.DIGTCERT.QRECOVER resource is defined in the FACILITY
class.
The user has sufficient authority to all of these resources.

See z/OS Security Server RACF Security Administrator's Guide for
more information about the IRR.DIGTCERT.function and
IRR.RPKISERV.function resources.

Explanation

System action

User response

RACF Security Administrator Response