z/OS Security Server RACF Messages and Codes
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


ICH443I

z/OS Security Server RACF Messages and Codes
SA23-2291-00

ICH443I
The digital signature is not valid.

Explanation

The digital signature in the program does not match the hash of the program computed by RACF®. This message indicates that the program was modified since it was created, or that it was not properly signed.
Note:
  1. The program name is identified in message ICH440I or ICH441I. One of these messages precedes this message.
  2. This message is only issued if the audit specifications, in the SIGVER segment of the PROGRAM profile, result in the specific condition being audited.
  3. There might also be diagnostic information in a LOGREC record.

System action

If message ICH441I precedes this message, the program load continues. If message ICH440I precedes this message, the load fails.

Routing code

9 and 11

Descriptor code

6

RACF Security Administrator Response

Save the current program, and then replace the program with a copy from the installation media. If replacing the program with a copy from the installation media does not resolve the problem, replace the program with a copy from program provider.

You can temporarily bypass this error in any of the following ways:
  • If the load fails, change the SIGVER segment of the RACF PROGRAM class profile that protects this program to specify FAILLOAD(NEVER). This change enables the program to continue.
  • Specify SIGAUDIT(NONE) or NOSIGAUDIT to stop this message being issued for this program again.
  • Remove the SIGVER segment from the PROGRAM class profile.
  • Delete the PROGRAM class profile if it is not being used to restrict or audit access to the program.
Note: The current security policy flagged this condition as an error. Bypassing the error prevents this message from being issued when the program is loaded, but reduces system security and does not resolve the problem. Once you resolve the problem, revisit your FAILLOAD and SIGAUDIT settings.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014