Hello! I'm new to ICSF, and in my Installation they want to use the following callable service: CSNBHMG, and we have different problems. We are running z/OS 2.2, Crypto Express 5 and FMID=HCR77B0
1) after executing the cobol program that invokes that service, it ended with return code = 12 (C). After that I changed the CKDS to a variable length one, and I had to add an AES-MK. Therefore I had to maintain a second MK (besides DES-MK). After that I downloaded a REXX program that invokes that callable service, and it runs OK, but... 2) The COBOL program (made by a developper of our installation) uses a Key to calculate the hash with sha-256. This Key (after an ICH408I message in the spool), I had to add it in the CSFKEYS class of RACF as a label, and I also added the Key to the CKDS with the CSFKGUP Utility. I'm almost sure that I didn't write well the operands. After that he run again the program ended with a return code=08 and a the reason code: ICSF 2738 (10040). It means that Key identifiers contain a version number. The version number in a supplied key identifier (internal or external) is inconsistent with one or more fields in the key identifier, making the key identifier unusable. *User action*: Use a token containing the required version number. My questions are: 1) Why do I have to define that key in RACF and the CKDS that he use to calculate the hash? And I use it without problem in a REXX 2) If I have to define the key, with what parameters I have to do it? Thanks in advance, Andrea ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
