On Thu, 5 Apr 2018 18:36:22 +0000, Dyck, Lionel B. (TRA) wrote: >What will happen with 2.3? Will this diag setting disappear as it becomes >hardened as NO?
It doesn't change with 2.3, but after 2.3. >What will offenders encounter - some kind of x78 or 0C4 or something else? The Init and Tuning manual says <quote> VSM ALLOWUSERKEYCSA(NO|YES) NO prevents user key CSA from being allocated by failing any attempt to obtain user key from a CSA subpool (through GETMAIN or STORAGE OBTAIN) with a B04-5C, B0A-5C, or B78-5C abend. The default is NO. IBM recommends that you should not specify ALLOWUSERKEYCSA(YES). User key CSA creates a security risk because any unauthorized program can modify it. </quote> -- Tom Marchant ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN