Use the SETROPTS command to determine if the KEYSMSTR class is activated. Use the RLIST command to determine that the KEYSMSTR class LDAP.BINDPW.KEY profile is defined and that it has a SSIGNON segment that contains either a masked or encrypted key. If key encryption is requested, determine that a cryptographic product is present on the system and that it is active. The cryptographic product must be active when you define the profile to the KEYSMSTR class. Correct any problems and reissue the command.