Sounds like a recipe for disaster. Using guest crypto on VM might be a better way to test something like this. I'd do it in assembler. Trying to figure out the previous length problem without the assembler and just COBOL was discouraging.
Paul -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Hal Merritt Sent: Thursday, July 21, 2005 5:00 PM To: [email protected] Subject: Re: Newbie doubt about Supervised State All you have to do is specify AC=1 in the binder control statements, then have your program promoted to an APF authorized library. It is the ICSF API that requires the authorization. I think it is because you are trying to work with the keys, not just the tokens. Are you sure you really want to be adding, deleting, or changing keys? Crypto keys are a *serious* hot button with auditors. The whole process end to end has to be protected. Keys flowing in the open over a network are bound to attract attention. Of course, you may safely expect security and sysprogs to recoil in horror when you ask for access to such a library (I certainly did when I was first asked). Then you remind them that you will need both test and production libraries as well as QA, depending on your site's policies. BTW, we built a special set of load libraries and wrapped them in an extra heavy security blanket. HTH and good luck. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of De La Fuente Seivane, Victor Sent: Thursday, July 21, 2005 12:38 PM To: [email protected] Subject: Newbie doubt about Supervised State Hello all! As I write in the subject, I'm just a newbie. I'm sure what I'm going to ask is obvious, but here I go... I have a PL/I program trying to work with ICSF, and using one of the functions (I don't remember which one) and I reached Return Code 8; Reason Code 2068. It means I must execute the program in supervisor state or key 0. What can I do to execute my program in Supervisor state? Thanks all! Best regards! Víctor de la Fuente Seivane ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
