We get this error intermittently on zos1.13. From my reading of the IBM Ported
tools book and some help from Dovetailed a possible solution is to add
environment variable _ZOS_SSH_PRNG_CMDS_TIMEOUT and increase the time out
value. For testing purposes I added _ZOS_SSH_PRNG_CMDS_TIMEOUT=2000 to
You might want to consider upgrading ICSF to HCR77A1 or higher. If you
do you'll be able to use the hardware based random number generator even
if your processor doesn't have CryptoExpress cards installed.
Mark Jacobs
Dazzo, Matt mailto:00a854d4f854-dmarc-requ...@listserv.ua.edu
April
at this time.
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
On Behalf Of Mark Jacobs - Listserv
Sent: Tuesday, April 14, 2015 7:56 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Cross-post from mvsoe - FOTS1842 problem renaming PRNG
seedfile
Hmmm, I thought it was a hardware feature. tks
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Mark Jacobs - Listserv
Sent: Tuesday, April 14, 2015 9:22 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Cross-post from mvsoe - FOTS1842
@LISTSERV.UA.EDU] On Behalf
Of Dazzo, Matt
Sent: Tuesday, April 14, 2015 11:08 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Cross-post from mvsoe - FOTS1842 problem renaming PRNG seedfile
Hmmm, I thought it was a hardware feature. tks
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM
mvsoe - FOTS1842 problem renaming PRNG seedfile
You might want to consider upgrading ICSF to HCR77A1 or higher. If you
do you'll be able to use the hardware based random number generator even
if your processor doesn't have CryptoExpress cards installed.
Mark Jacobs
Dazzo, Matt mailto
Absolutely. The best option is NOT to use ssh-rand-helper. You need
HCR77A0 or later to get ICSF /dev/random support *without* a crypto-express
card.
If you look at our IBM Ported Tools OpenSSH - Quick Install Guides -
http://dovetail.com/docs/coz/coz_index.html
there is information on setup
