Re: diagnose 8 / interesting dilemma

[Paul Schuster]

Thank you for all of the responses and ideas.

I guess if your 'guest operating system' is something
like 'CMS' then it is quite easy to get consecutive pages of
real storage addresses.  But not quite so easy with z/os.

I guess if you really want to do 'query virtual dasd' under
z/os pre z/vm 6.4 you would need to do it via multiple calls to
diagnose 8 and doing a 'query virtual -' into the 4k
buffer and then
further parse out the DASD addresses. Or use Ed Jaffe's methodology.

Thank you.

Paul

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

AW: Re: AW: Re: Does >4K PGFIX make sure the frames are contiguous?

[Peter Hunkeler]

>On 10/19/2016 7:51 AM, Peter Hunkeler wrote:
>> But the net seems to be, my assumption is wrong. If an area >4k is PGFIXed, 
>> then I need to find the real address of every page and cannot assume the 
>> real storage is contiguous.
 >
>This is a correct statement.  PGFIXing storage guarantees the page is
>assigned to a real frame and the real address of the frame can not
>change.  But the real frames used for this will only be contiguous by
>chance.




So this was one more of those things that you just unconsciously assume. And 
then comes a long a question and turns everything upside down. One more reason 
why this list is simply great. Thank you to all who contribute patiently.




--
Peter Hunkeler



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Paul Gilmartin]

On Wed, 19 Oct 2016 18:28:23 -0400, Tony Harminc wrote:
>
>OT, but the "You are now in France" attack, followed by the "You are
>still in France" attack, was a hot topic in 1998-1999.
> 
Thanks for the interesting OT info, until now new to me.

>http://catless.ncl.ac.uk/Risks/19/74#subj8  You are now in France
>http://catless.ncl.ac.uk/Risks/20/17#subj1  France allows strong crypto

- - To supplement the current legal framework by the introduction of
obligations, together with penal sanctions, concerning the handing-over
to the legal authorities, when they require it, of the cleartext
version of encrypted documents. ...

Yeah, right.  How did that work in San Bernardino?

... At the same time, the technical
skills of the public authorities will be significantly improved.

The skill of breaking strong encryption would be highly marketable,
even to the point of being an incentive to defect.

>http://catless.ncl.ac.uk/Risks/20/20#subj8  You are still in France

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Intrdr (and IEC141I 013-6)

[Paul Gilmartin]

On Mon, 17 Oct 2016 20:10:49 -0500, Paul Gilmartin wrote:

>On Mon, 17 Oct 2016 19:10:23 -0400, scott Ford wrote:
>
>>I am passing sysin data behind the actual JCL , it can be large up to 32k..
>>I wasn't sure about punching the JCL and data to the Intrdr when the
>>logical record length us that large .
>>
>"punch"?
>
>The following submits a job that works nicely:
>
(That's on JES2.  On JES3 the SYSUT1 and SYSUT2 data sets are garbled,
at least when viewed with SDSF.)

>/* Rexx */  signal on novalue;  /*
>   Doc: Long records to INTRDR.
>*/
>
>trace R
>L = 32752  /* ISFUNLD fails with IEC141I 013-6 on SYSUT1 at 32753!?  */
>RC = BPXWDYN( 'alloc rtddn(D) sysout writer(INTRDR) recfm(V,B) lrecl('L') 
>blksiz
>e(0) msg(2)' )
>
>trace Err
>call P '//'
>call P '//LONGINP   JOB  505303JOB,''Paul Gilmartin'','
>call P '// MSGLEVEL=(1,1),REGION=0M'
>call P '//*'
>call P '//  EXPORT SYMLIST=*'
>call P '//*'
>call P '//USERCOUTPUT JESDS=ALL,DEFAULT=YES,'
>call P '//*  DEST=,'
>call P '//  CLASS=R,PAGEDEF=V0648Z,CHARS=GT12'
>call P '//*'
>call P '//STEP  EXEC  PGM=IEBGENER'
>call P '//SYSPRINT  DD  SYSOUT=(,)'
>call P '//SYSIN DD  DUMMY'
>call P '//SYSUT2DD  SYSOUT=(,)'
>call P '//SYSUT1DD  *'
>call P 'Long record test.'
>call P right( 'Long record 1', L - 4 )
>call P right( 'Long record 2', L - 4 )
>call P '//'
>return( RC )
>
>P:
>trace C
>address 'MVS'
>S.1 = arg( 1 )
>'EXECIO 1 DISKW' D '(STEM S.'
>return( RC )
>
>If I try LRECL>=32753 up to 32756 the job runs OK, but I get IEC141I 013-6
>on the SYSUT1 spool data set when I try to copy it with code similar to an
>example in the SDSF guide.  This might happen if some code were counting
>the RDW twice.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM and z/OS OpenSSH

[Jack J. Woehr]

Jack J. Woehr wrote:
OpenSSH is used mission-critically on z/OS. OpenSSH comes from the OpenBSD project. 


My query on this subject has been responded to by responsible parties within 
IBM.

It is clear to me that IBM has supported the OpenBSD project.

Thank you, IBM.

--
Jack J. Woehr # Science is more than a body of knowledge. It's a way of
www.well.com/~jax # thinking, a way of skeptically interrogating the universe
www.softwoehr.com # with a fine understanding of human fallibility. - Carl Sagan

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: AW: Re: Does >4K PGFIX make sure the frames are contiguous?

[Ed Jaffe]

On 10/19/2016 3:35 PM, Greg Dyck wrote:

On 10/19/2016 7:51 AM, Peter Hunkeler wrote:
But the net seems to be, my assumption is wrong. If an area >4k is 
PGFIXed, then I need to find the real address of every page and 
cannot assume the real storage is contiguous.


This is a correct statement.  PGFIXing storage guarantees the page is 
assigned to a real frame and the real address of the frame can not 
change.  But the real frames used for this will only be contiguous by 
chance.


Current GA z/VM _still_ has no support for large guest pages! So, while 
the world waits for EDAT support to be implemented by the z/VM 
developers, we have code that briefly fixes a large virtual storage area 
and then inspects it (using LRAG) to find the largest contiguous area we 
can get (up to a max of 16 4K pages I think) where both virtual and real 
addresses are contiguous. We unfix and free everything else but this area...


--
Edward E Jaffe
Phoenix Software International, Inc
831 Parkview Drive North
El Segundo, CA 90245
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: AW: Re: Does >4K PGFIX make sure the frames are contiguous?

[Greg Dyck]

On 10/19/2016 7:51 AM, Peter Hunkeler wrote:

But the net seems to be, my assumption is wrong. If an area >4k is PGFIXed, 
then I need to find the real address of every page and cannot assume the real 
storage is contiguous.


This is a correct statement.  PGFIXing storage guarantees the page is 
assigned to a real frame and the real address of the frame can not 
change.  But the real frames used for this will only be contiguous by 
chance.


Regards, Greg

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Tony Harminc]

On 19 October 2016 at 12:10, Paul Gilmartin
<000433f07816-dmarc-requ...@listserv.ua.edu> wrote:

> Ouch!  But there's a widespread belief that availability of encryption is a 
> security threat.
>
> I used to read that France much restricted use of encryption.  Nowadays
> that would seem to prohibit iPhones and much limit E-commerce.

OT, but the "You are now in France" attack, followed by the "You are
still in France" attack, was a hot topic in 1998-1999.

http://catless.ncl.ac.uk/Risks/19/74#subj8  You are now in France
http://catless.ncl.ac.uk/Risks/20/17#subj1  France allows strong crypto
http://catless.ncl.ac.uk/Risks/20/20#subj8  You are still in France

Tony H.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Mark Jacobs - Listserv]

Once the ICSF Master Keys are entered into the crypto domain after the 
first IPL of each system, they'll be there and ready when you IPL your 
DR system in the future. If you've changed the keys on the production 
side, you have to keep them in sync with the DR box too.


Mark Jacobs

Jesse 1 Robinson 
October 19, 2016 at 5:22 PM
Thanks to Stuart for pointing me to his doc. ;-)

Radoslaw, you said in one post that the whole thing can be done ahead 
of time, but your latest post mentions only LPAR Image profile setup 
on HMC. Mike Ward (and Stuart's doc) refer to ICSF, which requires an 
OS, that is, IPL. Ours is a push-pull installation. New box cannot 
even be cabled up until the old one is brought down. It should not 
take long to run ICSF on each LPAR, but I'd prefer to take care of it 
in advance if possible. Otherwise it will just have to be part of the 
install.


One extra complication. This is our DR machine. There are a few LPARs 
that run all the time, but most come up only during DR testing. I take 
it we need to bring up DR systems for ICSF master key...


.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-302-7535 Office
robin...@sce.com

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
On Behalf Of R.S.

Sent: Wednesday, October 19, 2016 1:12 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Well,
Customize Activation Profiles, LPAR profile, Crypto tab.
You have to set up some values for two things:
Crypto Domain. Assign one "Control and Usage domain". Unique one.
Use the same domain if CSFPRMxx (or just leave it default).

Assigned Cryptos
Assign all existing CryptoExpress cards as Candidate and Online.

Note: this is simple configuration, one of many possible. Details are 
more complex and depend on many factors.

When teaching this I spent few hours on that. :-)

--
Radoslaw Skorupka
Lodz, Poland

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Please be alert for any emails that may ask you for login information 
or directs you to login via a link. If you believe this message is a 
phish or aren't sure whether this message is trustworthy, please send 
the original message as an attachment to 'phish...@timeinc.com'.




--

Mark Jacobs
Time Customer Service
Global Technology Services

The standard you walk past is the standard you accept.
Lt. Gen. David Morrison


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Jesse 1 Robinson]

Thanks to Stuart for pointing me to his doc. ;-)

Radoslaw, you said in one post that the whole thing can be done ahead of time, 
but your latest post mentions only LPAR Image profile setup on HMC. Mike Ward 
(and Stuart's doc) refer to ICSF, which requires an OS, that is, IPL. Ours is a 
push-pull installation. New box cannot even be cabled up until the old one is 
brought down. It should not take long to run ICSF on each LPAR, but I'd prefer 
to take care of it in advance if possible. Otherwise it will just have to be 
part of the install. 

One extra complication. This is our DR machine. There are a few LPARs that run 
all the time, but most come up only during DR testing. I take it we need to 
bring up DR systems for ICSF master key...

.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-302-7535 Office
robin...@sce.com

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of R.S.
Sent: Wednesday, October 19, 2016 1:12 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded

W dniu 2016-10-19 o 20:36, Dazzo, Matt pisze:
> RS, what do you mean by 'setup lpar in advance?' We will be doing a scheduled 
> IPL this weekend so I have an opportunity should I need to make a config 
> change.
>

Well,
Customize Activation Profiles, LPAR profile, Crypto tab.
You have to set up some values for two things:
Crypto Domain. Assign one "Control and Usage domain". Unique one.
Use the same domain if CSFPRMxx (or just leave it default).

Assigned Cryptos
Assign all existing CryptoExpress cards as Candidate and Online.

Note: this is simple configuration, one of many possible. Details are more 
complex and depend on many factors.
When teaching this I spent few hours on that. :-)

--
Radoslaw Skorupka
Lodz, Poland

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Questions about Shared Memory Communications (SMC)

[R.S.]

1. SMC and OSX chpid.
Is it possible to use SMC (ISM or RoCE for multi-CPC) associated with 
OSX chcpid?

Allowed PNET ID value IEDN suggest it should be possible.

2. ISM and Hipersockets
Does ISM work with IQD chpid working as External Bridge?
If yes, does it mean, only z/OS systems working as z/VM guests are 
allowed to use it?

No native (LPAR) z/OS?

3. Duplicate PNET ID
For RoCE card/port it is possible set up PNET ID which is already in use 
by another port. Is it an error, or just way to set up multiple 
redundant SMC-R links?


--
Radoslaw Skorupka
Lodz, Poland






---
Treść tej wiadomości może zawierać informacje prawnie chronione Banku 
przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie 
jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem 
niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania 
adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne działanie o podobnym charakterze jest prawnie zabronione i może być 
karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie 
zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość 
włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
www.mBank.pl, e-mail: kont...@mbank.pl
Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru 
Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. 
Według stanu na dzień 01.01.2016 r. kapitał zakładowy mBanku S.A. (w całości 
wpłacony) wynosi 168.955.696 złotych.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: JCL changes in z/OS 2.1

[John Eells]

R.S. wrote:

I'm looking for a presentation or paper describing changes introduced in
z/OS 2.1
For v 2.2 things are simpler - JCL Reference, Summary of Changes.
Unfortunately in 2.1 manual it is rather "summary of links to other
books". To generic, to be useful.
Maybe some SHARE material?



BTW: several things I found (unordered):
REGIONX, DSENQSHR (both are z/OS 2.2)
// EXPORT SYMLIST=
DD ...SYMBOLS=
PARMDD
SYSTEM, SYSAFF in JOB statement
MERGE & DDNAME in OUTPUT statement
SCHEDULE Statement (2.2)
PDSE v2
PS EF 2 (with zEDC)
GDG enhancements (several)




All the ones I thought important that would fit into an hour are here:

https://share.confex.com/share/121/webprogram/Session13581.html

--
John Eells
IBM Poughkeepsie
ee...@us.ibm.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[R.S.]

W dniu 2016-10-19 o 20:36, Dazzo, Matt pisze:

RS, what do you mean by 'setup lpar in advance?' We will be doing a scheduled 
IPL this weekend so I have an opportunity should I need to make a config change.



Well,
Customize Activation Profiles, LPAR profile, Crypto tab.
You have to set up some values for two things:
Crypto Domain. Assign one "Control and Usage domain". Unique one.
Use the same domain if CSFPRMxx (or just leave it default).

Assigned Cryptos
Assign all existing CryptoExpress cards as Candidate and Online.

Note: this is simple configuration, one of many possible. Details are 
more complex and depend on many factors.

When teaching this I spent few hours on that. :-)

--
Radoslaw Skorupka
Lodz, Poland






---
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku 
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie 
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem 
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania 
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by 
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie 
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo 
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
www.mBank.pl, e-mail: kont...@mbank.pl
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru 
Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. 
Wedug stanu na dzie 01.01.2016 r. kapita zakadowy mBanku S.A. (w caoci 
wpacony) wynosi 168.955.696 zotych.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

JCL changes in z/OS 2.1

[R.S.]

I'm looking for a presentation or paper describing changes introduced in 
z/OS 2.1

For v 2.2 things are simpler - JCL Reference, Summary of Changes.
Unfortunately in 2.1 manual it is rather "summary of links to other 
books". To generic, to be useful.

Maybe some SHARE material?



BTW: several things I found (unordered):
REGIONX, DSENQSHR (both are z/OS 2.2)
// EXPORT SYMLIST=
DD ...SYMBOLS=
PARMDD
SYSTEM, SYSAFF in JOB statement
MERGE & DDNAME in OUTPUT statement
SCHEDULE Statement (2.2)
PDSE v2
PS EF 2 (with zEDC)
GDG enhancements (several)


--
Radoslaw Skorupka
Lodz, Poland






---
Treść tej wiadomości może zawierać informacje prawnie chronione Banku 
przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie 
jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem 
niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania 
adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne działanie o podobnym charakterze jest prawnie zabronione i może być 
karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie 
zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość 
włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzibą w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
www.mBank.pl, e-mail: kont...@mbank.pl
Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru 
Sądowego, nr rejestru przedsiębiorców KRS 025237, NIP: 526-021-50-88. 
Według stanu na dzień 01.01.2016 r. kapitał zakładowy mBanku S.A. (w całości 
wpłacony) wynosi 168.955.696 złotych.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Ward, Mike S]

Master Key set is done through ICSF.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Jesse 1 Robinson
Sent: Wednesday, October 19, 2016 10:42 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Implementing ICSF - FOTS1949 PRNG is not seeded

We are installing a z13s and going through preliminary setup. When selecting 
the Crypto tab in an Image profile, I was a bit alarmed by this message:

Attention: You must install the 'IBM CP Assist for Cryptographic Functions' 
(CPACF) feature if a cryptographic candidate is selected from the list box. 
Otherwise, some functions of Integrated Cryptographic Service Facility (ICSF) 
may fail.

I spoke to the person who created and placed the order. He assured me that 
CPACF had been ordered and that no one he talked to believed that it requires 
explicit 'activation'. So I went to a z12 that has been in service for years. I 
see the same warning message on the Crypto tab. So it appears to be standard 
boilerplate that does not reflect the status of CPACF.

We’re still exploring how to set the Master Key. We had thought that it was an 
HCM task, but now we're led to believe that it's done through ICSF. Which means 
that we have to IPL (each?) LPAR in order to set it. The guy who did this for 
years is gone.   

.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-302-7535 Office
robin...@sce.com


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kirk Wolf
Sent: Wednesday, October 19, 2016 8:20 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Right.  I've never seen this particular error caused by a missing CPACF feature.
More likely either ICSF is not started or the correct userids do not have 
access to the necessary ICSF features via SAF/RACF.

Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Wed, Oct 19, 2016 at 10:13 AM, R.S. 
wrote:

> W dniu 2016-10-19 o 17:05, John Eells pisze:
>
>> R.S. wrote:
>> 
>>
>>> Double click on CPC icon. Instance Information tab, bottom right 
>>> corner "CP Assist for Crypto functions:
>>> Installed".
>>>
>>
>> Note also that CPACF is a feature, so if it's not installed 
>> (enabled), you need to order the feature to get it installed. 
>> (Whether its enablement or lack thereof matters in this context, I 
>> have no clue.)
>>
>> Isn't it enabled by default for all customers except North Korea ? 
>> ;-)
>
> --
> Radoslaw Skorupka
> Lodz, Poland


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

==
This email, and any files transmitted with it, is confidential and intended 
solely for the use of the individual or entity to which it is addressed. If you 
have received this email in error, please notify the system manager. This 
message contains confidential information and is intended only for the 
individual named. If you are not the named addressee, you should not 
disseminate, distribute or copy this e-mail. Please notify the sender 
immediately by e-mail if you have received this message by mistake and delete 
this e-mail from your system. If you are not the intended recipient, you are 
notified that disclosing, copying, distributing or taking any action in 
reliance on the contents of this information is strictly prohibited.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Randomly disappearing IGD101I messages.

[Longabaugh, Robert E]

The IGD101I is in IBM code.  As long as the output volume is SMS controlled, 
the IGD101I should appear consistenly.

There are some ways that an SMS data set can become non-SMS after the move.  
This would depend on the ACS rules in place, or whether you are using an 
Allocation Management product like CA Allocate to redirect allocations, the 
TOVOL parameter which may have non-SMS target volumes, or if the SMS MC, DC, 
and SC of the original data was used by setting SMSALLOCY.   If that kind of a 
quick check does not produce the reason, then it would be best to open a case 
with Level 1 Support and they can look over the documentation.
 
IEF196I appears when a message is for a job running under the MSTR subsystem.  
This does not appear to be the case here.


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lizette Koehler
Sent: Wednesday, October 19, 2016 9:26 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Randomly disappearing IGD101I messages.

In my case we have automation suppressing the messages.

However, I will see them occasionally when it is preceded by an IEF196I message

IEF196I  IGD101I 


Our scheduling software reads the SMF Records as they are created.  It does not 
require the IGD101I messages to trigger the next job when a dataset/file is 
created/updated.

Lizette

> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Vernooij, Kees (ITOPT1) - KLM
> Sent: Wednesday, October 19, 2016 4:48 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Randomly disappearing IGD101I messages.
> 
> I am not looking for a workaround, we already have one.
> I am looking for the mysterious algorithm that decided to produce or 
> not produce IGD101I. This is what makes Control-M trigger a job.
> 
> Kees.
> 
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
> On Behalf Of Elardus Engelbrecht
> Sent: 19 October, 2016 12:44
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Randomly disappearing IGD101I messages.
> 
> Vernooij, Kees (ITOPT1) - KLM wrote:
> 
> >Well, the situation is becoming more and more curious:
> - I checked 400 runs of the job in the last year and IGD101I appears 
> in 2/3 of the jobs and does not appear in 1/3 of the jobs, without an 
> indication of why
> 
> Ok, try this temporary workaround:
> 
> In Control-M, insert JOBEND for the job which creates that dataset.
> Now trigger a job which checks whether the dataset is in fact there 
> (allocated / SMS / etc. ) [1] If true, trigger then your second job.
> 
> Groete / Greetings
> Elardus Engelbrecht
> 
> [1] - Something like this little Clist:
> 
>   IF ('') = OK THEN   +
>DO
> WRITE DATASET FOUND
> SET  = 0
>END
>   ELSE  +
>DO
> WRITE DATA SET NOT FOUND
> SET  = 4
>END
> 

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: [EXTERNAL] Re: IBM PMR Entry requires an OS?

[Roger Bolan]

It varies by product.   DCF (Document Composition Facility), for example is
one product ID  across z/VSE, z/VM, and z/OS, while PSF is separate
products across the same three mainframe environments.
--ROGER

On Oct 19, 2016 7:36 AM, "Dyck, Lionel B. (TRA)"  wrote:

> For products that run on multiple platforms the product selection accounts
> for that  - for ISPF I can select ISPF for z/OS or z/VM - I would imagine
> (could be wrong) that other multi-platform products have similar options
> (or should)
>
>
> --
> Lionel B. Dyck (TRA Contractor)
> Mainframe Systems Programmer
> Enterprise Infrastructure Support (Station 200) (005OP6.3.10)
> VA OI Service Delivery & Engineering
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Charles Mills
> Sent: Wednesday, October 19, 2016 8:34 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: [EXTERNAL] Re: IBM PMR Entry requires an OS?
>
> I have no idea but what about products that run on more than one OS?
>
> Maybe this is just one of those "it's an imperfect world" things?
>
> Charles
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Dyck, Lionel B. (TRA)
> Sent: Wednesday, October 19, 2016 9:21 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: IBM PMR Entry requires an OS?
>
> Am I missing something in the IBM Service Request (PMR) entry.  The user
> is required to enter a product, which implies an OS, but then is forced to
> select an OS from a dropdown list.
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send email
> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Looking for New Function APARs across the entire z/OS platform?

[Paul Gilmartin]

On Tue, 18 Oct 2016 15:51:39 -0500, Marna WALLE wrote:
>
>With IBM using continuous delivery across the entire z/OS platform and in many 
>cases introducing new functions within the service stream, there are now two 
>ways to quickly learn about those APARs (aka SPEs):
> 
With the two-year release cycle, the latency for some FIN APARs can be
uncomfortably long.  Is there a policy shift which might make APARs for
which FIN is suggested now be eligible for the "continuous delivery" stream?

Might RFEs likewise find their way into continuous delivery?

Thanks,
gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Dazzo, Matt]

RS, what do you mean by 'setup lpar in advance?' We will be doing a scheduled 
IPL this weekend so I have an opportunity should I need to make a config 
change. 

Thanks Matt

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of R.S.
Sent: Wednesday, October 19, 2016 12:18 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Implementing ICSF - FOTS1949 PRNG is not seeded


Whole ICSF setup, including Master Key introduction can be done without IPL.

However you have to set up the LPAR in advance. Those changes can be done 
dynamically or ...Activate will be required. In the last case IPL is a result.

--
Radoslaw Skorupka
Lodz, Poland








W dniu 2016-10-19 o 17:46, Mark Jacobs - Listserv pisze:
> Unless you have a TKE, you will have to use the ICSF panels to enter 
> the master keys. So yes, you'll need to IPL each image to do so. Just 
> a heads up that if you perform ICSF Master Key changes (recommended), 
> you might have to first enter the previous set of keys, then the 
> current set. I can elaborate on why if you'd like.
>
> Mark Jacobs
>
>> Jesse 1 Robinson 
>> October 19, 2016 at 11:41 AM
>> We are installing a z13s and going through preliminary setup. When 
>> selecting the Crypto tab in an Image profile, I was a bit alarmed by 
>> this message:
>>
>> Attention: You must install the 'IBM CP Assist for Cryptographic 
>> Functions'
>> (CPACF) feature if a cryptographic candidate is selected from the 
>> list box.
>> Otherwise, some functions of Integrated Cryptographic Service 
>> Facility (ICSF) may fail.
>>
>> I spoke to the person who created and placed the order. He assured me 
>> that CPACF had been ordered and that no one he talked to believed 
>> that it requires explicit 'activation'. So I went to a z12 that has 
>> been in service for years. I see the same warning message on the 
>> Crypto tab. So it appears to be standard boilerplate that does not 
>> reflect the status of CPACF.
>>
>> We're still exploring how to set the Master Key. We had thought that 
>> it was an HCM task, but now we're led to believe that it's done 
>> through ICSF. Which means that we have to IPL (each?) LPAR in order 
>> to set it. The guy who did this for years is gone.
>>
>> .
>> .
>> J.O.Skip Robinson
>> Southern California Edison Company
>> Electric Dragon Team Paddler
>> SHARE MVS Program Co-Manager
>> 323-715-0595 Mobile
>> 626-302-7535 Office
>> robin...@sce.com
>>
>>
>> -Original Message-
>> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
>> On Behalf Of Kirk Wolf
>> Sent: Wednesday, October 19, 2016 8:20 AM
>> To: IBM-MAIN@LISTSERV.UA.EDU
>> Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded
>>
>> Right. I've never seen this particular error caused by a missing 
>> CPACF feature.
>> More likely either ICSF is not started or the correct userids do not 
>> have access to the necessary ICSF features via SAF/RACF.
>>
>> Kirk Wolf
>> Dovetailed Technologies
>> http://dovetail.com
>>



---
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku 
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie 
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem 
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania 
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by 
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie 
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo 
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
www.mBank.pl, e-mail: kont...@mbank.pl
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru 
Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. 
Wedug stanu na dzie 01.01.2016 r. kapita zakadowy mBanku S.A. (w caoci 
wpacony) wynosi 168.955.696 zotych.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to 

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Stuart zseries]

Skip - Check the web pages I left behind. Instructions for setting the 
keys through the ICSF panels are in there.


On 10/19/2016 08:41 AM, Jesse 1 Robinson wrote:
> We are installing a z13s and going through preliminary setup. When selecting 
> the Crypto tab in an Image profile, I was a bit alarmed by this message:
>
> Attention: You must install the 'IBM CP Assist for Cryptographic Functions'
> (CPACF) feature if a cryptographic candidate is selected from the list box.
> Otherwise, some functions of Integrated Cryptographic Service Facility (ICSF) 
> may fail.
>
> I spoke to the person who created and placed the order. He assured me that 
> CPACF had been ordered and that no one he talked to believed that it requires 
> explicit 'activation'. So I went to a z12 that has been in service for years. 
> I see the same warning message on the Crypto tab. So it appears to be 
> standard boilerplate that does not reflect the status of CPACF.
>
> We’re still exploring how to set the Master Key. We had thought that it was 
> an HCM task, but now we're led to believe that it's done through ICSF. Which 
> means that we have to IPL (each?) LPAR in order to set it. The guy who did 
> this for years is gone.
>
> .
> .
> J.O.Skip Robinson
> Southern California Edison Company
> Electric Dragon Team Paddler
> SHARE MVS Program Co-Manager
> 323-715-0595 Mobile
> 626-302-7535 Office
> robin...@sce.com
>
>
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On 
> Behalf Of Kirk Wolf
> Sent: Wednesday, October 19, 2016 8:20 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded
>
> Right.  I've never seen this particular error caused by a missing CPACF 
> feature.
> More likely either ICSF is not started or the correct userids do not have 
> access to the necessary ICSF features via SAF/RACF.
>
> Kirk Wolf
> Dovetailed Technologies
> http://dovetail.com
>
> On Wed, Oct 19, 2016 at 10:13 AM, R.S. 
> wrote:
>
>> W dniu 2016-10-19 o 17:05, John Eells pisze:
>>
>>> R.S. wrote:
>>> 
>>>
 Double click on CPC icon. Instance Information tab, bottom right
 corner "CP Assist for Crypto functions:
 Installed".

>>> Note also that CPACF is a feature, so if it's not installed
>>> (enabled), you need to order the feature to get it installed.
>>> (Whether its enablement or lack thereof matters in this context, I
>>> have no clue.)
>>>
>>> Isn't it enabled by default for all customers except North Korea ?
>>> ;-)
>> --
>> Radoslaw Skorupka
>> Lodz, Poland
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Looking for New Function APARs across the entire z/OS platform?

[Richards, Robert B.]

Marna,

Thanks for the offer, but let me pursue my end first. I did not succeed with 
FF, IE or Chrome.

Bob

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Marna WALLE
Sent: Wednesday, October 19, 2016 12:51 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Looking for New Function APARs across the entire z/OS platform?

Hi Bob,
Two people here have tried with these browsers, and we were able to get to all 
3 files:  IE 11, FF ESR 45.4.0, Chrome 53.0.2785.143 m, and Safari.
If you want to send me more details, I can forward to one of the web groups to 
see if they can identify the problem.  This new page and files were modeled 
after the Enhanced HOLDDATA page and files.

-Marna WALLE
z/OS System Installation, IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Looking for New Function APARs across the entire z/OS platform?

[Marna WALLE]

Hi Bob,
Two people here have tried with these browsers, and we were able to get to all 
3 files:  IE 11, FF ESR 45.4.0, Chrome 53.0.2785.143 m, and Safari.
If you want to send me more details, I can forward to one of the web groups to 
see if they can identify the problem.  This new page and files were modeled 
after the Enhanced HOLDDATA page and files.

-Marna WALLE
z/OS System Installation, IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[R.S.]

Whole ICSF setup, including Master Key introduction can be done without IPL.

However you have to set up the LPAR in advance. Those changes can be 
done dynamically or ...Activate will be required. In the last case IPL 
is a result.


--
Radoslaw Skorupka
Lodz, Poland








W dniu 2016-10-19 o 17:46, Mark Jacobs - Listserv pisze:
Unless you have a TKE, you will have to use the ICSF panels to enter 
the master keys. So yes, you'll need to IPL each image to do so. Just 
a heads up that if you perform ICSF Master Key changes (recommended), 
you might have to first enter the previous set of keys, then the 
current set. I can elaborate on why if you'd like.


Mark Jacobs


Jesse 1 Robinson 
October 19, 2016 at 11:41 AM
We are installing a z13s and going through preliminary setup. When 
selecting the Crypto tab in an Image profile, I was a bit alarmed by 
this message:


Attention: You must install the 'IBM CP Assist for Cryptographic 
Functions'
(CPACF) feature if a cryptographic candidate is selected from the 
list box.
Otherwise, some functions of Integrated Cryptographic Service 
Facility (ICSF) may fail.


I spoke to the person who created and placed the order. He assured me 
that CPACF had been ordered and that no one he talked to believed 
that it requires explicit 'activation'. So I went to a z12 that has 
been in service for years. I see the same warning message on the 
Crypto tab. So it appears to be standard boilerplate that does not 
reflect the status of CPACF.


We’re still exploring how to set the Master Key. We had thought that 
it was an HCM task, but now we're led to believe that it's done 
through ICSF. Which means that we have to IPL (each?) LPAR in order 
to set it. The guy who did this for years is gone.


.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-302-7535 Office
robin...@sce.com


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
On Behalf Of Kirk Wolf

Sent: Wednesday, October 19, 2016 8:20 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Right. I've never seen this particular error caused by a missing 
CPACF feature.
More likely either ICSF is not started or the correct userids do not 
have access to the necessary ICSF features via SAF/RACF.


Kirk Wolf
Dovetailed Technologies
http://dovetail.com





---
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku 
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie 
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem 
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania 
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by 
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie 
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo 
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
www.mBank.pl, e-mail: kont...@mbank.pl
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru 
Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. 
Wedug stanu na dzie 01.01.2016 r. kapita zakadowy mBanku S.A. (w caoci 
wpacony) wynosi 168.955.696 zotych.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Paul Gilmartin]

On Wed, 19 Oct 2016 10:20:16 -0500, Kirk Wolf wrote:

>Right.  I've never seen this particular error caused by a missing CPACF
>feature.
>More likely either ICSF is not started or the correct userids do not have
>access to the necessary ICSF features via SAF/RACF.
> 
Ouch!  But there's a widespread belief that availability of encryption is a
security threat.

I used to read that France much restricted use of encryption.  Nowadays
that would seem to prohibit iPhones and much limit E-commerce.

Is ssh-rand-helper now thoroughly deprecated?  I used to wonder about
its message to the effect that sufficient entropy was unavailable.  That
would seem to be an undecidable proposition.

>On Wed, Oct 19, 2016 at 10:13 AM, R.S. wrote:
>
>>> Isn't it enabled by default for all customers except North Korea ? ;-)
>> 
Others?  I used to understand that ITAR excused only USA and Canada.

-- gil

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Tom Mathias]

The message you saw:

Attention: You must install the 'IBM CP Assist for Cryptographic Functions'  
(CPACF) feature if a cryptographic candidate is selected from the list box.  
Otherwise, some functions of Integrated Cryptographic Service Facility (ICSF) 
may fail. 

Is really a hint or reminder rather than an error message.  It is just 
reminding you that you may have additional setup to do before you can really 
use ICSF. 

Tom Mathias
SE/HMC Development Team

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Mark Jacobs - Listserv]

If you're not creating any data encryption keys in the CKDS, then a one 
cylinder database is plenty of sapce.


Mark Jacobs


Dazzo, Matt 
October 19, 2016 at 11:46 AM
RS, Kirk thanks.

I was able to confirm from the SE that CPACF is enabled.

I have started configuring ICSF and trying to determine the size of 
the CKDS. For now ICSF will be used for SSH-ftp, I am not sure if a 
lot of keys are dynamically created or is just the master key going to 
be in there? From reading ICSF programmers guide I take it that it 
depends on what ICSF will be used for will determine if a lot of keys 
are created. I rather not create a CKDS too large if I don't have to. 
Any comments would be helpful.


Thanks Matt





-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
On Behalf Of Kirk Wolf

Sent: Wednesday, October 19, 2016 11:20 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Right. I've never seen this particular error caused by a missing CPACF 
feature.
More likely either ICSF is not started or the correct userids do not 
have access to the necessary ICSF features via SAF/RACF.


Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Wed, Oct 19, 2016 at 10:13 AM, R.S. 

--
For IBM-MAIN subscribe / signoff / archive access instructions, send 
email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Please be alert for any emails that may ask you for login information 
or directs you to login via a link. If you believe this message is a 
phish or aren't sure whether this message is trustworthy, please send 
the original message as an attachment to 'phish...@timeinc.com'.


Kirk Wolf 
October 19, 2016 at 11:20 AM
Right. I've never seen this particular error caused by a missing CPACF
feature.
More likely either ICSF is not started or the correct userids do not have
access to the necessary ICSF features via SAF/RACF.

Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Wed, Oct 19, 2016 at 10:13 AM, R.S. 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Please be alert for any emails that may ask you for login information 
or directs you to login via a link. If you believe this message is a 
phish or aren't sure whether this message is trustworthy, please send 
the original message as an attachment to 'phish...@timeinc.com'.


R.S. 
October 19, 2016 at 11:13 AM

Isn't it enabled by default for all customers except North Korea ? ;-)

--
Radoslaw Skorupka
Lodz, Poland






---
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku 
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe 
by jedynie jej adresat z wyczeniem dostpu osób trzecich. Jeeli 
nie jeste adresatem niniejszej wiadomoci lub pracownikiem 
upowanionym do jej przekazania adresatowi, informujemy, e jej 
rozpowszechnianie, kopiowanie, rozprowadzanie lub inne dziaanie o 
podobnym charakterze jest prawnie zabronione i moe by karalne. 
Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie 
zawiadomi nadawc wysyajc odpowied oraz trwale usun t 
wiadomo wczajc w to wszelkie jej kopie wydrukowane lub zapisane 
na dysku.


This e-mail may contain legally privileged information of the Bank and 
is intended solely for business use of the addressee. This e-mail may 
only be received by the addressee and may not be disclosed to any 
third parties. If you are not the intended addressee of this e-mail or 
the employee authorized to forward it to the addressee, be advised 
that any dissemination, copying, distribution or any other similar 
activity is legally prohibited and may be punishable. If you received 
this e-mail by mistake please advise the sender immediately by using 
the reply facility in your e-mail software and delete permanently this 
e-mail including any copies of it either printed or saved to hard drive.


mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
www.mBank.pl, e-mail: kont...@mbank.pl
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego 
Rejestru Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 
526-021-50-88. Wedug stanu na dzie 01.01.2016 r. kapita zakadowy 
mBanku S.A. (w caoci wpacony) wynosi 168.955.696 zotych.



--
For IBM-MAIN subscribe / 

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Mark Jacobs - Listserv]

Unless you have a TKE, you will have to use the ICSF panels to enter the 
master keys. So yes, you'll need to IPL each image to do so. Just a 
heads up that if you perform ICSF Master Key changes (recommended), you 
might have to first enter the previous set of keys, then the current 
set. I can elaborate on why if you'd like.


Mark Jacobs


Jesse 1 Robinson 
October 19, 2016 at 11:41 AM
We are installing a z13s and going through preliminary setup. When 
selecting the Crypto tab in an Image profile, I was a bit alarmed by 
this message:


Attention: You must install the 'IBM CP Assist for Cryptographic 
Functions'
(CPACF) feature if a cryptographic candidate is selected from the list 
box.
Otherwise, some functions of Integrated Cryptographic Service Facility 
(ICSF) may fail.


I spoke to the person who created and placed the order. He assured me 
that CPACF had been ordered and that no one he talked to believed that 
it requires explicit 'activation'. So I went to a z12 that has been in 
service for years. I see the same warning message on the Crypto tab. 
So it appears to be standard boilerplate that does not reflect the 
status of CPACF.


We’re still exploring how to set the Master Key. We had thought that 
it was an HCM task, but now we're led to believe that it's done 
through ICSF. Which means that we have to IPL (each?) LPAR in order to 
set it. The guy who did this for years is gone.


.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-302-7535 Office
robin...@sce.com


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] 
On Behalf Of Kirk Wolf

Sent: Wednesday, October 19, 2016 8:20 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Right. I've never seen this particular error caused by a missing CPACF 
feature.
More likely either ICSF is not started or the correct userids do not 
have access to the necessary ICSF features via SAF/RACF.


Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Wed, Oct 19, 2016 at 10:13 AM, R.S. 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Please be alert for any emails that may ask you for login information 
or directs you to login via a link. If you believe this message is a 
phish or aren't sure whether this message is trustworthy, please send 
the original message as an attachment to 'phish...@timeinc.com'.




--

Mark Jacobs
Time Customer Service
Global Technology Services

The standard you walk past is the standard you accept.
Lt. Gen. David Morrison


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Dazzo, Matt]

RS, Kirk thanks. 

I was able to confirm from the SE that CPACF is enabled.

 I have started configuring ICSF and trying to determine the size of the CKDS. 
For now ICSF will be used for SSH-ftp,  I am not sure if a lot of keys are 
dynamically created or is just the master key going to be in there? From 
reading ICSF programmers guide I take it that it depends on what ICSF will be 
used for will determine if a lot of keys are created. I rather not create a 
CKDS too large if I don't have to. Any comments would be helpful. 

Thanks Matt





-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kirk Wolf
Sent: Wednesday, October 19, 2016 11:20 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Right.  I've never seen this particular error caused by a missing CPACF feature.
More likely either ICSF is not started or the correct userids do not have 
access to the necessary ICSF features via SAF/RACF.

Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Wed, Oct 19, 2016 at 10:13 AM, R.S. 
wrote:

> W dniu 2016-10-19 o 17:05, John Eells pisze:
>
>> R.S. wrote:
>> 
>>
>>> Double click on CPC icon. Instance Information tab, bottom right 
>>> corner "CP Assist for Crypto functions:
>>> Installed".
>>>
>>
>> Note also that CPACF is a feature, so if it's not installed 
>> (enabled), you need to order the feature to get it installed. 
>> (Whether its enablement or lack thereof matters in this context, I 
>> have no clue.)
>>
>> Isn't it enabled by default for all customers except North Korea ? 
>> ;-)
>
> --
> Radoslaw Skorupka
> Lodz, Poland
>
>
>
>
>
>
> ---
> Tre   tej wiadomo ci mo e zawiera  informacje prawnie chronione Banku
> przeznaczone wy  cznie do u ytku s u bowego adresata. Odbiorc  mo e by 
> jedynie jej adresat z wy  czeniem dost pu osób trzecich. Je eli nie 
> jeste adresatem niniejszej wiadomo ci lub pracownikiem upowa nionym do 
> jej przekazania adresatowi, informujemy,  e jej rozpowszechnianie, 
> kopiowanie, rozprowadzanie lub inne dzia anie o podobnym charakterze jest 
> prawnie
> zabronione i mo e by  karalne. Je eli otrzyma e  t  wiadomo   omy kowo,
> prosimy niezw ocznie zawiadomi  nadawc  wysy aj c odpowied  oraz trwale
> usun   t  wiadomo   w  czaj c w to wszelkie jej kopie wydrukowane lub
> zapisane na dysku.
>
> This e-mail may contain legally privileged information of the Bank and 
> is intended solely for business use of the addressee. This e-mail may 
> only be received by the addressee and may not be disclosed to any 
> third parties. If you are not the intended addressee of this e-mail or 
> the employee authorized to forward it to the addressee, be advised 
> that any dissemination, copying, distribution or any other similar 
> activity is legally prohibited and may be punishable. If you received 
> this e-mail by mistake please advise the sender immediately by using 
> the reply facility in your e-mail software and delete permanently this 
> e-mail including any copies of it either printed or saved to hard drive.
>
> mBank S.A. z siedzib  w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
> www.mBank.pl, e-mail: kont...@mbank.pl S d Rejonowy dla m. st. 
> Warszawy XII Wydzia  Gospodarczy Krajowego Rejestru S dowego, nr 
> rejestru przedsi biorców KRS 025237, NIP:
> 526-021-50-88. Wed ug stanu na dzie  01.01.2016 r. kapita  zak adowy 
> mBanku S.A. (w ca o ci wp acony) wynosi 168.955.696 z otych.
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions, send 
> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Jesse 1 Robinson]

We are installing a z13s and going through preliminary setup. When selecting 
the Crypto tab in an Image profile, I was a bit alarmed by this message:

Attention: You must install the 'IBM CP Assist for Cryptographic Functions' 
(CPACF) feature if a cryptographic candidate is selected from the list box. 
Otherwise, some functions of Integrated Cryptographic Service Facility (ICSF) 
may fail.

I spoke to the person who created and placed the order. He assured me that 
CPACF had been ordered and that no one he talked to believed that it requires 
explicit 'activation'. So I went to a z12 that has been in service for years. I 
see the same warning message on the Crypto tab. So it appears to be standard 
boilerplate that does not reflect the status of CPACF.

We’re still exploring how to set the Master Key. We had thought that it was an 
HCM task, but now we're led to believe that it's done through ICSF. Which means 
that we have to IPL (each?) LPAR in order to set it. The guy who did this for 
years is gone.   

.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler 
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-302-7535 Office
robin...@sce.com


-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kirk Wolf
Sent: Wednesday, October 19, 2016 8:20 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded

Right.  I've never seen this particular error caused by a missing CPACF feature.
More likely either ICSF is not started or the correct userids do not have 
access to the necessary ICSF features via SAF/RACF.

Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Wed, Oct 19, 2016 at 10:13 AM, R.S. 
wrote:

> W dniu 2016-10-19 o 17:05, John Eells pisze:
>
>> R.S. wrote:
>> 
>>
>>> Double click on CPC icon. Instance Information tab, bottom right 
>>> corner "CP Assist for Crypto functions:
>>> Installed".
>>>
>>
>> Note also that CPACF is a feature, so if it's not installed 
>> (enabled), you need to order the feature to get it installed. 
>> (Whether its enablement or lack thereof matters in this context, I 
>> have no clue.)
>>
>> Isn't it enabled by default for all customers except North Korea ? 
>> ;-)
>
> --
> Radoslaw Skorupka
> Lodz, Poland


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Tom Brennan]

Thanks - I think I need to read that!  One client I work with has CPACF 
installed with no crypto cards, but no ICSF running.  They run SSH 
uploads hundreds or maybe thousands of times per day, and every day 
there are a few timeout failures (on their pretty slow z114) while 
initializing the SSH connection.


My theory is this is because crypto work is all being done in software, 
and maybe some work could be offloaded to CPACF if I can figure out how 
to get ICSF running to use it.


Kirk Wolf wrote:

Have you looked at our Quick Start guide for installing and tuning z/OS 2.2
OpenSSH?
https://dovetail.com/docs/pt-quick-inst/index.html

your question I believe is covered in section "1.6 Using ICSF and
/dev/random"


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Tom Brennan]

When IBM or a business partner orders a new mainframe, CPACF is enabled 
by default only if the machine has Crypto cards.  Otherwise, it's a 
no-charge feature code so it would make sense to be sure the person 
ordering the mainframe knows to enable it, even if you don't need it 
right away.


R.S. wrote:

Isn't it enabled by default for all customers except North Korea ? ;-)



--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Kirk Wolf]

Right.  I've never seen this particular error caused by a missing CPACF
feature.
More likely either ICSF is not started or the correct userids do not have
access to the necessary ICSF features via SAF/RACF.

Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Wed, Oct 19, 2016 at 10:13 AM, R.S. 
wrote:

> W dniu 2016-10-19 o 17:05, John Eells pisze:
>
>> R.S. wrote:
>> 
>>
>>> Double click on CPC icon. Instance Information tab, bottom right corner
>>> "CP Assist for Crypto functions:
>>> Installed".
>>>
>>
>> Note also that CPACF is a feature, so if it's not installed (enabled),
>> you need to order the feature to get it installed. (Whether its enablement
>> or lack thereof matters in this context, I have no clue.)
>>
>> Isn't it enabled by default for all customers except North Korea ? ;-)
>
> --
> Radoslaw Skorupka
> Lodz, Poland
>
>
>
>
>
>
> ---
> Tre   tej wiadomo ci mo e zawiera  informacje prawnie chronione Banku
> przeznaczone wy  cznie do u ytku s u bowego adresata. Odbiorc  mo e by
> jedynie jej adresat z wy  czeniem dost pu osób trzecich. Je eli nie jeste
> adresatem niniejszej wiadomo ci lub pracownikiem upowa nionym do jej
> przekazania adresatowi, informujemy,  e jej rozpowszechnianie, kopiowanie,
> rozprowadzanie lub inne dzia anie o podobnym charakterze jest prawnie
> zabronione i mo e by  karalne. Je eli otrzyma e  t  wiadomo   omy kowo,
> prosimy niezw ocznie zawiadomi  nadawc  wysy aj c odpowied  oraz trwale
> usun   t  wiadomo   w  czaj c w to wszelkie jej kopie wydrukowane lub
> zapisane na dysku.
>
> This e-mail may contain legally privileged information of the Bank and is
> intended solely for business use of the addressee. This e-mail may only be
> received by the addressee and may not be disclosed to any third parties. If
> you are not the intended addressee of this e-mail or the employee
> authorized to forward it to the addressee, be advised that any
> dissemination, copying, distribution or any other similar activity is
> legally prohibited and may be punishable. If you received this e-mail by
> mistake please advise the sender immediately by using the reply facility in
> your e-mail software and delete permanently this e-mail including any
> copies of it either printed or saved to hard drive.
>
> mBank S.A. z siedzib  w Warszawie, ul. Senatorska 18, 00-950 Warszawa,
> www.mBank.pl, e-mail: kont...@mbank.pl
> S d Rejonowy dla m. st. Warszawy XII Wydzia  Gospodarczy Krajowego
> Rejestru S dowego, nr rejestru przedsi biorców KRS 025237, NIP:
> 526-021-50-88. Wed ug stanu na dzie  01.01.2016 r. kapita  zak adowy mBanku
> S.A. (w ca o ci wp acony) wynosi 168.955.696 z otych.
>
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: HMC CPC Image

[Tom Mathias]

If you have a new image in the IOCDS, then you have two ways to create a 
matching image profile.  You could open up the DEFAULT image profile and 
basically save it under a new name, with your appropriate changes.  Or, if you 
target the CPC (not the image) on the SE or HMC and run the Customize/Delete 
Activation Profile task, then you can use the "New Image Profile" button to 
launch a wizard to create the image profile for any image(s) that don't already 
have an image profile.   Just select only the line for the missing image 
profile (it will say "Not Created" on that line) and the "New Image Profile" 
button will be enabled.  

Tom Mathias
SE/HMC Development Team Leader

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[R.S.]

W dniu 2016-10-19 o 17:05, John Eells pisze:

R.S. wrote:


Double click on CPC icon. Instance Information tab, bottom right corner
"CP Assist for Crypto functions:
Installed".


Note also that CPACF is a feature, so if it's not installed (enabled), 
you need to order the feature to get it installed. (Whether its 
enablement or lack thereof matters in this context, I have no clue.)



Isn't it enabled by default for all customers except North Korea ? ;-)

--
Radoslaw Skorupka
Lodz, Poland






---
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku 
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie 
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem 
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania 
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by 
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie 
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo 
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
www.mBank.pl, e-mail: kont...@mbank.pl
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru 
Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. 
Wedug stanu na dzie 01.01.2016 r. kapita zakadowy mBanku S.A. (w caoci 
wpacony) wynosi 168.955.696 zotych.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[John Eells]

R.S. wrote:


Double click on CPC icon. Instance Information tab, bottom right corner
"CP Assist for Crypto functions:
Installed".


Note also that CPACF is a feature, so if it's not installed (enabled), 
you need to order the feature to get it installed.  (Whether its 
enablement or lack thereof matters in this context, I have no clue.)


--
John Eells
IBM Poughkeepsie
ee...@us.ibm.com

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[R.S.]

W dniu 2016-10-19 o 16:19, Dazzo, Matt pisze:

This is totally new world for me so bear with me.  Been reading for several 
hours on trying to determine what I need to satisfy the support of 'OpenSSH 
requires that a working /dev/random device' as I got the error  'FOTS1949 PRNG 
is not seeded' when testing SSH-FTP on my newly installed zos2.2 system.

I determined that  ICSF has to be implemented (started) but does CPACF have to 
be  enabled ? From reading the archives I found in a thread that displaying the 
CPU would show if the CPACF is enabled?

Below is a display of our CPU, appears the CPACF is not enabled? Does this 
require an IPL?

D M=CPU
IEE174I 09.46.57 DISPLAY M 216
PROCESSOR STATUS
ID  CPU  SERIAL
00  + 024E7E2828
01  + 024E7E2828
02  +I024E7E2828
03  NI
04  NI
05  NI


Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN




In order to start ICSF (some simplification here) you have to have CPACF 
enabled.

How to check it?

Logon on Support Element. Not to be confused with HMC. The same action 
on HMC will NOT give you the answer.


Double click on CPC icon. Instance Information tab, bottom right corner 
"CP Assist for Crypto functions:

Installed".

HTH

--
Radoslaw Skorupka
Lodz, Poland






---
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku 
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie 
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem 
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania 
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie 
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by 
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie 
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo 
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.

This e-mail may contain legally privileged information of the Bank and is 
intended solely for business use of the addressee. This e-mail may only be 
received by the addressee and may not be disclosed to any third parties. If you 
are not the intended addressee of this e-mail or the employee authorized to 
forward it to the addressee, be advised that any dissemination, copying, 
distribution or any other similar activity is legally prohibited and may be 
punishable. If you received this e-mail by mistake please advise the sender 
immediately by using the reply facility in your e-mail software and delete 
permanently this e-mail including any copies of it either printed or saved to 
hard drive.

mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, 
www.mBank.pl, e-mail: kont...@mbank.pl
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru 
Sdowego, nr rejestru przedsibiorców KRS 025237, NIP: 526-021-50-88. 
Wedug stanu na dzie 01.01.2016 r. kapita zakadowy mBanku S.A. (w caoci 
wpacony) wynosi 168.955.696 zotych.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Implementing ICSF - FOTS1949 PRNG is not seeded

[Kirk Wolf]

Have you looked at our Quick Start guide for installing and tuning z/OS 2.2
OpenSSH?
https://dovetail.com/docs/pt-quick-inst/index.html

your question I believe is covered in section "1.6 Using ICSF and
/dev/random"



Kirk Wolf
Dovetailed Technologies
http://dovetail.com

On Wed, Oct 19, 2016 at 9:19 AM, Dazzo, Matt <
00a854d4f854-dmarc-requ...@listserv.ua.edu> wrote:

> This is totally new world for me so bear with me.  Been reading for
> several hours on trying to determine what I need to satisfy the support of
> 'OpenSSH requires that a working /dev/random device' as I got the error
> 'FOTS1949 PRNG is not seeded' when testing SSH-FTP on my newly installed
> zos2.2 system.
>
> I determined that  ICSF has to be implemented (started) but does CPACF
> have to be  enabled ? From reading the archives I found in a thread that
> displaying the CPU would show if the CPACF is enabled?
>
> Below is a display of our CPU, appears the CPACF is not enabled? Does this
> require an IPL?
>
> D M=CPU
> IEE174I 09.46.57 DISPLAY M 216
> PROCESSOR STATUS
> ID  CPU  SERIAL
> 00  + 024E7E2828
> 01  + 024E7E2828
> 02  +I024E7E2828
> 03  NI
> 04  NI
> 05  NI
>
>
> Thanks Matt
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Looking for New Function APARs across the entire z/OS platform?

[Richards, Robert B.]

I *was* using Firefox  :-(

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Farley, Peter x23353
Sent: Wednesday, October 19, 2016 10:30 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Looking for New Function APARs across the entire z/OS platform?

Try Firefox.  With IE11 it doesn't respond for me either, but Firefox gets it.

Peter

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Richards, Robert B.
Sent: Wednesday, October 19, 2016 9:59 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Looking for New Function APARs across the entire z/OS platform?

Marna,

This link never responds back:   New function APARs for the past 12 months 
(HTML)

Bob

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Marna WALLE
Sent: Tuesday, October 18, 2016 4:52 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Looking for New Function APARs across the entire z/OS platform?

Hello IBM-MAINers,
With IBM using continuous delivery across the entire z/OS platform and in many 
cases introducing new functions within the service stream, there are now two 
ways to quickly learn about those APARs (aka SPEs):

1) Subscribe to receive notification of those APARs right after the APAR 
closes, via email or subscription list.  See WSC Techdoc 
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/PRS5188 for 
information on how to do this.  

2) Refer to the website for a "history" of closed APARs, available in HTML ad 
CSV formats.  See 
http://www.ibm.com/systems/z/os/zos/installation/zosnfapars.html .   There are 
details on this website on what is included in this "history".

Of course, you still will want to watch for product announcements, but these 
two ways are nice in that you can see New Function APARs in a consolidated 
manner.  We are hoping that these two methods will help you find new functions 
in a helpful way.  If you have any comments about this,  please respond here, 
or email me if you prefer.

--


This message and any attachments are intended only for the use of the addressee 
and may contain information that is privileged and confidential. If the reader 
of the message is not the intended recipient or an authorized representative of 
the intended recipient, you are hereby notified that any dissemination of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify us immediately by e-mail and delete the message and any 
attachments from your system.


--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Randomly disappearing IGD101I messages.

[Lizette Koehler]

In my case we have automation suppressing the messages.

However, I will see them occasionally when it is preceded by an IEF196I message

IEF196I  IGD101I 


Our scheduling software reads the SMF Records as they are created.  It does not 
require the IGD101I messages to trigger the next job when a dataset/file is 
created/updated.

Lizette

> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Vernooij, Kees (ITOPT1) - KLM
> Sent: Wednesday, October 19, 2016 4:48 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Randomly disappearing IGD101I messages.
> 
> I am not looking for a workaround, we already have one.
> I am looking for the mysterious algorithm that decided to produce or not
> produce IGD101I. This is what makes Control-M trigger a job.
> 
> Kees.
> 
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
> Behalf Of Elardus Engelbrecht
> Sent: 19 October, 2016 12:44
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Randomly disappearing IGD101I messages.
> 
> Vernooij, Kees (ITOPT1) - KLM wrote:
> 
> >Well, the situation is becoming more and more curious:
> - I checked 400 runs of the job in the last year and IGD101I appears in 2/3 of
> the jobs and does not appear in 1/3 of the jobs, without an indication of why
> 
> Ok, try this temporary workaround:
> 
> In Control-M, insert JOBEND for the job which creates that dataset.
> Now trigger a job which checks whether the dataset is in fact there (allocated
> / SMS / etc. ) [1] If true, trigger then your second job.
> 
> Groete / Greetings
> Elardus Engelbrecht
> 
> [1] - Something like this little Clist:
> 
>   IF ('') = OK THEN   +
>DO
> WRITE DATASET FOUND
> SET  = 0
>END
>   ELSE  +
>DO
> WRITE DATA SET NOT FOUND
> SET  = 4
>END
> 

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Looking for New Function APARs across the entire z/OS platform?

[Farley, Peter x23353]

Try Firefox.  With IE11 it doesn't respond for me either, but Firefox gets it.

Peter

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Richards, Robert B.
Sent: Wednesday, October 19, 2016 9:59 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Looking for New Function APARs across the entire z/OS platform?

Marna,

This link never responds back:   New function APARs for the past 12 months 
(HTML)

Bob

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Marna WALLE
Sent: Tuesday, October 18, 2016 4:52 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Looking for New Function APARs across the entire z/OS platform?

Hello IBM-MAINers,
With IBM using continuous delivery across the entire z/OS platform and in many 
cases introducing new functions within the service stream, there are now two 
ways to quickly learn about those APARs (aka SPEs):

1) Subscribe to receive notification of those APARs right after the APAR 
closes, via email or subscription list.  See WSC Techdoc 
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/PRS5188 for 
information on how to do this.  

2) Refer to the website for a "history" of closed APARs, available in HTML ad 
CSV formats.  See 
http://www.ibm.com/systems/z/os/zos/installation/zosnfapars.html .   There are 
details on this website on what is included in this "history".

Of course, you still will want to watch for product announcements, but these 
two ways are nice in that you can see New Function APARs in a consolidated 
manner.  We are hoping that these two methods will help you find new functions 
in a helpful way.  If you have any comments about this,  please respond here, 
or email me if you prefer.

--


This message and any attachments are intended only for the use of the addressee 
and may contain information that is privileged and confidential. If the reader 
of the message is not the intended recipient or an authorized representative of 
the intended recipient, you are hereby notified that any dissemination of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify us immediately by e-mail and delete the message and any 
attachments from your system.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Implementing ICSF - FOTS1949 PRNG is not seeded

[Dazzo, Matt]

This is totally new world for me so bear with me.  Been reading for several 
hours on trying to determine what I need to satisfy the support of 'OpenSSH 
requires that a working /dev/random device' as I got the error  'FOTS1949 PRNG 
is not seeded' when testing SSH-FTP on my newly installed zos2.2 system.

I determined that  ICSF has to be implemented (started) but does CPACF have to 
be  enabled ? From reading the archives I found in a thread that displaying the 
CPU would show if the CPACF is enabled?

Below is a display of our CPU, appears the CPACF is not enabled? Does this 
require an IPL?

D M=CPU
IEE174I 09.46.57 DISPLAY M 216
PROCESSOR STATUS
ID  CPU  SERIAL
00  + 024E7E2828
01  + 024E7E2828
02  +I024E7E2828
03  NI
04  NI
05  NI


Thanks Matt

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Looking for New Function APARs across the entire z/OS platform?

[Richards, Robert B.]

Marna,

This link never responds back:   New function APARs for the past 12 months 
(HTML)

Bob

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Marna WALLE
Sent: Tuesday, October 18, 2016 4:52 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Looking for New Function APARs across the entire z/OS platform?

Hello IBM-MAINers,
With IBM using continuous delivery across the entire z/OS platform and in many 
cases introducing new functions within the service stream, there are now two 
ways to quickly learn about those APARs (aka SPEs):

1) Subscribe to receive notification of those APARs right after the APAR 
closes, via email or subscription list.  See WSC Techdoc 
http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/PRS5188 for 
information on how to do this.  

2) Refer to the website for a "history" of closed APARs, available in HTML ad 
CSV formats.  See 
http://www.ibm.com/systems/z/os/zos/installation/zosnfapars.html .   There are 
details on this website on what is included in this "history".

Of course, you still will want to watch for product announcements, but these 
two ways are nice in that you can see New Function APARs in a consolidated 
manner.  We are hoping that these two methods will help you find new functions 
in a helpful way.  If you have any comments about this,  please respond here, 
or email me if you prefer.

-Marna WALLE
z/OS System Installation, IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: [EXTERNAL] Re: IBM PMR Entry requires an OS?

[Dyck, Lionel B. (TRA)]

For products that run on multiple platforms the product selection accounts for 
that  - for ISPF I can select ISPF for z/OS or z/VM - I would imagine (could be 
wrong) that other multi-platform products have similar options (or should)


--
Lionel B. Dyck (TRA Contractor)
Mainframe Systems Programmer 
Enterprise Infrastructure Support (Station 200) (005OP6.3.10)
VA OI Service Delivery & Engineering

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Charles Mills
Sent: Wednesday, October 19, 2016 8:34 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [EXTERNAL] Re: IBM PMR Entry requires an OS?

I have no idea but what about products that run on more than one OS?

Maybe this is just one of those "it's an imperfect world" things?

Charles

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Dyck, Lionel B. (TRA)
Sent: Wednesday, October 19, 2016 9:21 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: IBM PMR Entry requires an OS?

Am I missing something in the IBM Service Request (PMR) entry.  The user is 
required to enter a product, which implies an OS, but then is forced to select 
an OS from a dropdown list.

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: IBM PMR Entry requires an OS?

[Charles Mills]

I have no idea but what about products that run on more than one OS?

Maybe this is just one of those "it's an imperfect world" things?

Charles

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
Behalf Of Dyck, Lionel B. (TRA)
Sent: Wednesday, October 19, 2016 9:21 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: IBM PMR Entry requires an OS?

Am I missing something in the IBM Service Request (PMR) entry.  The user is
required to enter a product, which implies an OS, but then is forced to
select an OS from a dropdown list.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

IBM PMR Entry requires an OS?

[Dyck, Lionel B. (TRA)]

Am I missing something in the IBM Service Request (PMR) entry.  The user is 
required to enter a product, which implies an OS, but then is forced to select 
an OS from a dropdown list.

Shouldn't this be intuitive?

If I select z/OS ISPF then the entry system should 'know' that the OS is z/OS.


--
Lionel B. Dyck (TRA Contractor)
Mainframe Systems Programmer
Enterprise Infrastructure Support (Station 200) (005OP6.3.10)
VA OI Service Delivery & Engineering


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Looking for New Function APARs across the entire z/OS platform?

[Marna WALLE]

Bill,
Let me explain this in a different way, which is how you might be affected by 
it...

You might be seeing more New Function APARs (which Ed explained, is what many 
know as Small Programming Enhancements, or SPEs) in the service stream across 
the entire z/OS platform from many IBM products that are still in development.  
(This is because we are using newer development methods.)  If you wish to find 
a consolidated list of those New Function APARs, there are two ways to do that: 
 the subscription and the website.   

These "new" New Function APARs are really no different that the "old" New 
Function APARs, but you might just notice that there are more of them.  Also, 
you might notice that something you had a requirement for could be coming in a 
product's service stream and not necessarily wait until that product has a new 
release level.  For that reason, you might want to know what new functions in 
PTFs there are out there.  

"Service Delivery" means PTFs (++PTF).  "Release Delivery" means a new VRM 
(++FUNCTION).  These are terms that are important to understand, as it impacts 
how (and when) you get new functions.  

-Marna WALLE
z/OS Installation, IBM Poughkeepsie

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

AW: Re: Does >4K PGFIX make sure the frames are contiguous? (was: diagnose 8 / interesting dilemma)

[Peter Hunkeler]

> Data chaining was the original solution to this problem.


It was probably a bad idea to mention I/O in my post (I know about data 
chainging and IDAW). I was thinking more about the possible need to have more 
than 4k of contiguous real storage. Like Tony mentioned, new interfaces such as 
SMC-R/D might need this. There might be internal interfaces for this, right. It 
just triggered my curiosity.


But the net seems to be, my assumption is wrong. If an area >4k is PGFIXed, 
then I need to find the real address of every page and cannot assume the real 
storage is contiguous.


--
Peter Hunkeler

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: DSS RESTORE with SMS Managed 3584 Library - How??

[John McKown]

On Wed, Oct 19, 2016 at 6:41 AM, Roger Lowe  wrote:

> Hi,
>We have an SMS Managed 3584 Tape Library and would now like to use
> DFDSS RESTORE on our One Pack system to restore some dasd volumes from our
> weekly backup tapes as a recovery exercise.
> I have managed to vary online one of the drives to our one pack system and
> then used the web gui on the TS3500 to move the tape I require into the
> drive that is online to our one pack system - all seems to be good so far.
> However, when I run the batch DFDSS RESTORE job, I get the following
> message "IEF343I VOLRSTJB RESTORE TAPE - REQUEST FAILED - NOT ENOUGH
> NON-SYSTEM MANAGED VOLUMES ELIGIBLE"
> .
> As this is a one pack system, there isnt a valid SMS environment but
> somehow zOS knows that either the drive and/or the tape volume is under SMS
> management
> .
> Does anyone have any idea as to how to resolve this?
> .
> I did find  the following thread - https://groups.google.com/
> forum/#!topic/bit.listserv.ibm-main/mnyNGm6GzEg but it is referring more
> to the standalone DSS services
> .
> Thanks, Roger
>
>
​How are the tape drive addresses defined to your one pack system? If they
are defined as being controlled by a library, then you need to have the
TCDB (SYS1.VOLCAT.VGENERAL) initialized and SMS running. If you want to run
the tape library "manually", then you need to define it to your one pack
system as just a plan tape drive of the appropriate type and not as a
LIBRARY.​



-- 
Heisenberg may have been here.

Unicode: http://xkcd.com/1726/

Maranatha! <><
John McKown

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Randomly disappearing IGD101I messages.

[Vernooij, Kees (ITOPT1) - KLM]

I am not looking for a workaround, we already have one.
I am looking for the mysterious algorithm that decided to produce or not 
produce IGD101I. This is what makes Control-M trigger a job.

Kees.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Elardus Engelbrecht
Sent: 19 October, 2016 12:44
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Randomly disappearing IGD101I messages.

Vernooij, Kees (ITOPT1) - KLM wrote:

>Well, the situation is becoming more and more curious: 
- I checked 400 runs of the job in the last year and IGD101I appears in 2/3 of 
the jobs and does not appear in 1/3 of the jobs, without an indication of why

Ok, try this temporary workaround:

In Control-M, insert JOBEND for the job which creates that dataset.
Now trigger a job which checks whether the dataset is in fact there (allocated 
/ SMS / etc. ) [1]
If true, trigger then your second job.

Groete / Greetings
Elardus Engelbrecht 

[1] - Something like this little Clist:

  IF ('') = OK THEN   + 
   DO 
WRITE DATASET FOUND   
SET  = 0   
   END
  ELSE  + 
   DO 
WRITE DATA SET NOT FOUND  
SET  = 4   
   END

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

For information, services and offers, please visit our web site: 
http://www.klm.com. This e-mail and any attachment may contain confidential and 
privileged material intended for the addressee only. If you are not the 
addressee, you are notified that no part of the e-mail or any attachment may be 
disclosed, copied or distributed, and that any other action related to this 
e-mail or attachment is strictly prohibited, and may be unlawful. If you have 
received this e-mail by error, please notify the sender immediately by return 
e-mail, and delete this message. 

Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its 
employees shall not be liable for the incorrect or incomplete transmission of 
this e-mail or any attachments, nor responsible for any delay in receipt. 
Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch 
Airlines) is registered in Amstelveen, The Netherlands, with registered number 
33014286




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: diagnose 8 / interesting dilemma

[Peter Relson]

> What happens if AMODE 31 code issues LRA and the real address
> is above the bar?  Program check? 
yes. The ramifications of using the mod-2G part of the real address were 
quite obvious. The architecture reflected that understanding by making 
this case program check.

>Or does LRA simply (always?) load a 64-bit register? 
no

>Is there an LRAG instruction?
yes

Peter Relson 
z/OS Core Technology Design


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

DSS RESTORE with SMS Managed 3584 Library - How??

[Roger Lowe]

Hi,
   We have an SMS Managed 3584 Tape Library and would now like to use DFDSS 
RESTORE on our One Pack system to restore some dasd volumes from our weekly 
backup tapes as a recovery exercise.
I have managed to vary online one of the drives to our one pack system and then 
used the web gui on the TS3500 to move the tape I require into the drive that 
is online to our one pack system - all seems to be good so far. 
However, when I run the batch DFDSS RESTORE job, I get the following message 
"IEF343I VOLRSTJB RESTORE TAPE - REQUEST FAILED - NOT ENOUGH NON-SYSTEM MANAGED 
VOLUMES ELIGIBLE"
.
As this is a one pack system, there isnt a valid SMS environment but somehow 
zOS knows that either the drive and/or the tape volume is under SMS management
.
Does anyone have any idea as to how to resolve this?
.
I did find  the following thread - 
https://groups.google.com/forum/#!topic/bit.listserv.ibm-main/mnyNGm6GzEg but 
it is referring more to the standalone DSS services
.
Thanks, Roger

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Randomly disappearing IGD101I messages.

[Elardus Engelbrecht]

Vernooij, Kees (ITOPT1) - KLM wrote:

>Well, the situation is becoming more and more curious: 
- I checked 400 runs of the job in the last year and IGD101I appears in 2/3 of 
the jobs and does not appear in 1/3 of the jobs, without an indication of why

Ok, try this temporary workaround:

In Control-M, insert JOBEND for the job which creates that dataset.
Now trigger a job which checks whether the dataset is in fact there (allocated 
/ SMS / etc. ) [1]
If true, trigger then your second job.

Groete / Greetings
Elardus Engelbrecht 

[1] - Something like this little Clist:

  IF ('') = OK THEN   + 
   DO 
WRITE DATASET FOUND   
SET  = 0   
   END
  ELSE  + 
   DO 
WRITE DATA SET NOT FOUND  
SET  = 4   
   END

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: ABO Automatic Binary Optimizer

[Bill Woodger]

Agreed apart from "the means". The original topic: "Does anyone know if this 
product, Automatic Binary Optimizer, will actually migrate Cobol V4 to V6 for 
you?  Our IBM reps are telling us that it will actually do the migration for 
you."

100 different people contacting the "ABO Team" is also an "outdated" way to do 
it. The ABO Team (probably) has no experience of "existing testing requirements 
for large systems" and on the other side of that hill, there is no/little 
information about *why* it is probably possible for ABO testing to be 
"different", and how to go about arguing for that.

With some more detailed knowledge of ABO first, a much more effective 
interaction can be expected.

If ABO is to become what it seems it is expected to become (by IBM), a 
significant tool expected to provide "hardware exploitation" to the majority of 
programs which not be recompiled in the foreseeable future, that can't happen 
in an information vacuum about the product.

It is early days with ABO, but what better time to start everything than 
"early" (and earlier than this)?

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Randomly disappearing IGD101I messages.

[Vernooij, Kees (ITOPT1) - KLM]

Bob,

Well, the situation is becoming more and more curious:
- I checked 400 runs of the job in the last year and IGD101I appears in 2/3 of 
the jobs and does not appear in 1/3 of the jobs, without an indication of why.
- We changed the copy step to FDR (PGM=FDRCOPY, statement: COPY TYPE=DSF) and 
this does not produce any IGD101I messages, nor does it produce IGD104I 
(retained) messages, which the DMS step did produce reliably. This, by the way, 
this makes FDR unfit for Control-M dataset triggering.

What causes IGD101I to appear and/or what causes SMS to produce IGD101I or not 
produce it. 
Is it depending on the actions DMS and FDR do? E.g. using BYPASSSMS options? 
Why does DMS sometimes have IGD101I generated and sometimes not?

Can you clarify this from the DMS side?

Kees.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Vernooij, Kees (ITOPT1) - KLM
Sent: 19 October, 2016 8:18
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Randomly disappearing IGD101I messages.

Bob,

I could not find any difference between the steps with and without IGD101I. The 
JCL is the same, the output dataset cannot exist because this would generate 
RC=8 and all steps have RC=0, all output datasets are SMS managed.
I'll do some further investigations to try to discover when the problem has 
started and what maintenance actions have taken place around that time.

Kees.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Longabaugh, Robert E
Sent: 18 October, 2016 19:48
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Randomly disappearing IGD101I messages.

When CA Disk moves SMS data sets, it renames the original to a temporary name 
and creates the new one with the existing name.  If the new data set is 
correctly created, cataloged, written, and closed, then CA Disk deletes the 
original (now renamed) data set.  If the move operation fails the original data 
set is renamed back to the original name.  The Auto Restore intercepts would 
not become involved, but the CA Disk SVC will intervene so that the last use 
date remains the same.

IGD101I is produced for a new SMS data set allocation.  IGD103I is for existing 
SMS data sets.  

Is it possible that the moved data set would sometimes be created non-SMS?  
This might be due to redirection by the ACS routine or an allocation management 
product such as CA Allocate.

Also check the CA Disk SYSPARM SMSALLOC, which determines if CA Disk passes the 
existing STORCLAS, DATACLAS, and MGMTCLAS to the allocation request for the 
move.  

Bob Longabaugh
CA Technologies
Storage Management

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Greg Shirey
Sent: Tuesday, October 18, 2016 9:27 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Randomly disappearing IGD101I messages.

I would suggest asking CA about the DMS step not generating the IGD101I 
message.  (DMS has a "hook" in SMS, doesn't it?) 

Regards,
Greg Shirey
Ben E. Keith Company

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lizette Koehler
Sent: Tuesday, October 18, 2016 8:46 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Randomly disappearing IGD101I messages.

One I see BMC has asked for doc. I would definitely do that.
Two, I concur with Tom Conley, Most scheduling software will provide an SMF 
Exit in order to see when datasets are created/updated.  

I would follow up with BMC and see what they say.  If they are dependent on 
IGD101I then you need to open a case to IBM on how or when the IGD101I is 
produced to SYSLOG.

A message is produced or not based on MPF list, Automation Tools, or a user 
exit.  The Vendors (IBM and BMC) should be able to help you determine why this 
is going on.

What z/OS Maintenance has been implemented when you first noticed this issue 
What BMC maintenance has been implemented when you first noticed this issue

What user exits are in your system (IEF*) or MPF List exit, or Automation tool 
changes.



--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

For information, services and offers, please visit our web site: 
http://www.klm.com. This e-mail and any attachment may contain confidential and 
privileged material intended for the addressee only. If you are not the 
addressee, you are notified that no part of the e-mail or any attachment may be 
disclosed, copied or distributed, and that any other action related to this 
e-mail or attachment is 

Re: Shopz issues?

[Richards, Robert B.]

Duly noted. I was just surprised by the sudden failure of RFC4217. Especially 
since I had just returned from a CS Security class!

Bob

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Kurt Quackenbush
Sent: Tuesday, October 18, 2016 6:09 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Shopz issues?

> We had been running with RFC4217 up to now and it was working.
>
> Regardless, per your recommendation (and the manual), I changed it to 
> CCCNONOTIFY.
>
> Voila! All is well with the RFN world once again, I owe Kurt another virtual 
> drink of his choice.

Glad its working for you now.

I should have also mentioned that instead of using FTPS you (and everyone else 
too) could have used HTTPS which has no FTP.DATA-like file full of confusing 
and conflicting options, and avoids typical FTPS firewall issues as a bonus.

Kurt Quackenbush -- IBM, SMP/E Development

--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Looking for New Function APARs across the entire z/OS platform?

[Ed Jaffe]

On 10/18/2016 5:09 PM, Paul Gilmartin wrote:


A conscientious vendor will try when practical to craft later corrective service
so as not to depend on recent SPEs.


Haha! Good luck with that! If the same part (source program) is 
involved, you really have only one practical choice: code your fix on 
top of the program known to be in error and hope they resolve their 
issues soon.


Coding your fix on top of an earlier, working version of the program 
would require its PTF to have an NPRE() to ensure the SPE PTF is 
restored before the new fix can be applied. In this case, the eventual 
fix for the broken SPE will need to supersede both PTFs.


I haven't seen this done in the last couple of decades at least, but it 
is technically possible.


--
Edward E Jaffe
Phoenix Software International, Inc
831 Parkview Drive North
El Segundo, CA 90245
http://www.phoenixsoftware.com/

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Re: Randomly disappearing IGD101I messages.

[Vernooij, Kees (ITOPT1) - KLM]

Bob,

I could not find any difference between the steps with and without IGD101I. The 
JCL is the same, the output dataset cannot exist because this would generate 
RC=8 and all steps have RC=0, all output datasets are SMS managed.
I'll do some further investigations to try to discover when the problem has 
started and what maintenance actions have taken place around that time.

Kees.

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Longabaugh, Robert E
Sent: 18 October, 2016 19:48
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Randomly disappearing IGD101I messages.

When CA Disk moves SMS data sets, it renames the original to a temporary name 
and creates the new one with the existing name.  If the new data set is 
correctly created, cataloged, written, and closed, then CA Disk deletes the 
original (now renamed) data set.  If the move operation fails the original data 
set is renamed back to the original name.  The Auto Restore intercepts would 
not become involved, but the CA Disk SVC will intervene so that the last use 
date remains the same.

IGD101I is produced for a new SMS data set allocation.  IGD103I is for existing 
SMS data sets.  

Is it possible that the moved data set would sometimes be created non-SMS?  
This might be due to redirection by the ACS routine or an allocation management 
product such as CA Allocate.

Also check the CA Disk SYSPARM SMSALLOC, which determines if CA Disk passes the 
existing STORCLAS, DATACLAS, and MGMTCLAS to the allocation request for the 
move.  

Bob Longabaugh
CA Technologies
Storage Management

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Greg Shirey
Sent: Tuesday, October 18, 2016 9:27 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Randomly disappearing IGD101I messages.

I would suggest asking CA about the DMS step not generating the IGD101I 
message.  (DMS has a "hook" in SMS, doesn't it?) 

Regards,
Greg Shirey
Ben E. Keith Company

-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Lizette Koehler
Sent: Tuesday, October 18, 2016 8:46 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Randomly disappearing IGD101I messages.

One I see BMC has asked for doc. I would definitely do that.
Two, I concur with Tom Conley, Most scheduling software will provide an SMF 
Exit in order to see when datasets are created/updated.  

I would follow up with BMC and see what they say.  If they are dependent on 
IGD101I then you need to open a case to IBM on how or when the IGD101I is 
produced to SYSLOG.

A message is produced or not based on MPF list, Automation Tools, or a user 
exit.  The Vendors (IBM and BMC) should be able to help you determine why this 
is going on.

What z/OS Maintenance has been implemented when you first noticed this issue 
What BMC maintenance has been implemented when you first noticed this issue

What user exits are in your system (IEF*) or MPF List exit, or Automation tool 
changes.



--
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

For information, services and offers, please visit our web site: 
http://www.klm.com. This e-mail and any attachment may contain confidential and 
privileged material intended for the addressee only. If you are not the 
addressee, you are notified that no part of the e-mail or any attachment may be 
disclosed, copied or distributed, and that any other action related to this 
e-mail or attachment is strictly prohibited, and may be unlawful. If you have 
received this e-mail by error, please notify the sender immediately by return 
e-mail, and delete this message. 

Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its 
employees shall not be liable for the incorrect or incomplete transmission of 
this e-mail or any attachments, nor responsible for any delay in receipt. 
Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch 
Airlines) is registered in Amstelveen, The Netherlands, with registered number 
33014286




--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN