On Thu, 5 Apr 2018 18:36:22 +0000, Dyck, Lionel B. (TRA) wrote:

>What will happen with 2.3?  Will this diag setting disappear as it becomes 
>hardened as NO?

It doesn't change with 2.3, but after 2.3.

>What will offenders encounter - some kind of x78 or 0C4 or something else?

The Init and Tuning manual says

<quote>
VSM ALLOWUSERKEYCSA(NO|YES)
NO prevents user key CSA from being allocated by failing any attempt to obtain 
user 
key from a CSA subpool (through GETMAIN or STORAGE OBTAIN) with a B04-5C, 
B0A-5C, or B78-5C abend. The default is NO. IBM recommends that you should not 
specify ALLOWUSERKEYCSA(YES). User key CSA creates a security risk because any 
unauthorized program can modify it.
</quote>

-- 
Tom Marchant

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to