ICH408I

Explanation
A user attempted to generate a PKI Services digital
certificate as a renewal for an existing certificate using the  R_PKIServ
callable service function GENRENEW, but is not authorized to do so.

System action
R_PKIServ processing ends. RACF® prevents the request from completing.

User response
See your security administrator.

RACF Security
Administrator Response
 Do the following tasks: Make sure that the FACILITY class is active.
Make sure the IRR.RPKISERV.GENRENEW resource is defined in the
FACILITY class.
Make sure the IRR.DIGTCERT.GENRENEW resource is defined in the
FACILITY class.
Make sure the IRR.DIGTCERT.GENCERT resource is defined in the
FACILITY class
Make sure that the user has sufficient authority to all of these
resources

See z/OS Security Server RACF Security Administrator's Guide for
additional information about the IRR.DIGTCERT.function and
IRR.RPKISERV.function resources.

Explanation

System action

User response

RACF Security Administrator Response