ICH408I

Explanation
A user attempted to verify the certificate status
through the PKI OCSP responder using the R_PKIServ callable service
function RESPOND, but is not authorized.

System action
R_PKIServ processing ends. RACF® prevents the request from completing.

User response
See your security administrator.

RACF Security
Administrator Response
 You can give the user access by
ensuring:The FACILITY class is active.
The IRR.RPKISERV.RESPOND resource is defined in the FACILITY class.
The IRR.DIGTCERT.RESPOND resource is defined in the FACILITY class.
The user has sufficient authority to both of these resources.

See z/OS Security Server RACF Security Administrator's Guide for
additional information about the IRR.DIGTCERT.function and IRR.RPKISERV.function
resources.

Explanation

System action

User response

RACF Security Administrator Response