z/OS Security Server RACF Messages and Codes
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


ICH445I

z/OS Security Server RACF Messages and Codes
SA23-2291-00

ICH445I
A digital signature is required but the program is not signed.

Explanation

The SIGVER segment of the RACF® PROGRAM class profile protecting this program specifies SIGREQUIRED(YES). This indicates that this program requires a signature, but the program is not digitally signed.
Note:
  1. The program name is identified in message ICH440I or ICH441I. One of these messages precedes this message.
  2. This message is issued only if the audit specifications, in the SIGVER segment of the PROGRAM profile, result in the specific condition being audited.

System action

If an ICH441I message precedes this message, then the program load continues. If an ICH440I message precedes this message, the load fails.

Routing code

9 and 11

Descriptor code

6

RACF Security Administrator Response

Contact the provider of the program and request a digitally signed version of this program.

You can temporarily bypass this error in any of the following ways:
  • If the load fails, change the SIGVER segment of the RACF PROGRAM class profile that protects this program to specify SIGREQUIRED(NO). This change enables the program to continue.
  • Specify SIGAUDIT(NONE) or NOSIGAUDIT to stop this message being issued for this program again.
  • Remove the SIGVER segment from the PROGRAM class profile.
  • Delete the PROGRAM class profile if it is not being used to restrict or audit access to the program.
Note: The current security policy flagged this condition as an error. Bypassing the error prevents this message from being issued when the program is loaded, but reduces system security and does not resolve the problem. Once you resolve the problem, revisit your FAILLOAD and SIGAUDIT settings.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014