I was trying to rename a key in the CKDS. I was using PGM=CSFKGUP,PARM=('SSM').
I received this error:
The master key verification patterns in the CKDS do not match the
verification patterns of the active DES and AES master keys.
We do not have any crypto hardware and no coprocessor's defined.
We do not have an active TKDS. CSF has no error message and starts
successfully.
This is not causing an operational issue - but from the error message something
is not in sync.
Also I was able to perform this function on our sandbox system - so the JCL is
correct.
This is the answer from IBM:
The following information should help to get you started. Your displays
show that you have no active cryptographic coprocessors. Unless your
target CKDS (specified by "CSFCKDS" value in your KGUP data definition
statement) is configured as a clear-key CKDS, you will need to load and
set the appropriate Master Keys (DES and/or AES) under which your CKDS
is encrypted to access and alter its contents. This requires the use of
cryptographic hardware. (Which we don't have)
This doesn't help me at all. I still don't have any idea's how to start. I am
just a rookie with ICSF.
How do I display the master key verification patterns ?
Where is this ? specified by "CSFCKDS" value in your KGUP data definition
statement
We are z/OS V2.2.
Any help would be appreciated.
Thanks
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
