Thank you for your help Ernesto. 

I'm trying to run the job in Example 9 (from 
https://www.ibm.com/docs/en/zos/3.2.0?topic=examples-example-9-new-default-credentials-cloud1-provider)
 

But I don't think I understand what it's supposed to do.  

I ran:
//ADDKEYS  EXEC PGM=GDKUTIL,REGION=0M
//SYSPRINT  DD SYSOUT=L
//SYSOUT    DD SYSOUT=L
//SYSIN     DD *
 CREDENTIALS(ADD) PROVIDER(AZURE)
/*
//CREDSNAM DD *
 /usr/lpp/dfsms/gdk/azurekeys.json
/*

/usr/lpp/dfsms/gdk/azurekeys.json contains:
{
  "accessKey": "9xxxxxxxxxxxxx42",
  "secretAccessKey": "38Exxxx2348C3",
}

(btw, the EXEC stmt in the example didn't have a step name, and it also says 
//CREDSNAME, not //CREDSNAM.) 

But I got these error messages:

5695-DF124 DFSMSdfp CDA 3.2    CLOUD OBJECT UTILITY    2026139 14:26:16
 CREDENTIALS(ADD) PROVIDER(AZURE)
GDKU0013I CREDSNAM: /usr/lpp/dfsms/gdk/azurekeys.json

GDKU0030I BUCKET NAME NOT SPECIFIED FOR CREDS(ADD) COMMAND.  CREDENTIALS WILL 
BE SAVED AS DEFAULT CREDENTIALS

GDKU0034E ERROR PARSING CREDENTIALS FILE.  RC:  265 RSN:  104 DIAG:  Expected 
pair name in object at offset 364.

-should the file pointed to by CREDSNAM be a valid gdkkeyf.json file, or just 
the key/secretKey pair?   (Or should it be accessKey/secretAccessKey?) 

-should those 2 values be the storage account name and Access key we also enter 
from SYS1.SAXREXEC(GDKAUTHP), or from a different user's gdkkeyf.json file?  
(The keys stored for different users are different, so I doubt that's correct.  
Does Azure have both an accesskey and secretAccessKey?) 

Thanks again, 
Wendell 

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to