ICSF 2738 means that you are trying to use a DES key when only AES is supported, or that you are trying an AES key when only DES is supported.
Check how you are making the call.. Joe On Fri, Oct 23, 2020 at 9:59 AM Isabel <[email protected]> wrote: > Hello! > > I'm new to ICSF, and in my Installation they want to use the following > callable service: CSNBHMG, and we have different problems. We are running > z/OS 2.2, Crypto Express 5 and FMID=HCR77B0 > > 1) after executing the cobol program that invokes that service, it ended > with return code = 12 (C). After that I changed the CKDS to a variable > length one, and I had to add an AES-MK. Therefore I had to maintain a > second MK (besides DES-MK). After that I downloaded a REXX program that > invokes that callable service, and it runs OK, but... > > 2) The COBOL program (made by a developper of our installation) uses a > Key to calculate the hash with sha-256. This Key (after an ICH408I message > in the spool), I had to add it in the CSFKEYS class of RACF as a label, and > I also added the Key to the CKDS with the CSFKGUP Utility. I'm almost sure > that I didn't write well the operands. After that he run again the program > ended with a return code=08 and a the reason code: ICSF 2738 (10040). It > means that > > Key identifiers contain a version number. The version number in a supplied > key identifier (internal or external) is inconsistent with one or more > fields in the key identifier, making the key identifier unusable. > > *User action*: Use a token containing the required version number. > > My questions are: > > 1) Why do I have to define that key in RACF and the CKDS that he use to > calculate the hash? And I use it without problem in a REXX > 2) If I have to define the key, with what parameters I have to do it? > > Thanks in advance, Andrea > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
