Can you show the job output? And are you able to get into ICSF panels?
What are your installation options? Dan -------------------------------------------------- On May 10, 2017, 12:51 PM -0400, Steely.Mark <[email protected]>, wrote: > I was trying to rename a key in the CKDS. I was using > PGM=CSFKGUP,PARM=('SSM'). > > I received this error: > > The master key verification patterns in the CKDS do not match the > verification patterns of the active DES and AES master keys. > > We do not have any crypto hardware and no coprocessor's defined. > We do not have an active TKDS. CSF has no error message and starts > successfully. > This is not causing an operational issue - but from the error message > something is not in sync. > Also I was able to perform this function on our sandbox system - so the JCL > is correct. > > This is the answer from IBM: > > The following information should help to get you started. Your displays > show that you have no active cryptographic coprocessors. Unless your > target CKDS (specified by "CSFCKDS" value in your KGUP data definition > statement) is configured as a clear-key CKDS, you will need to load and > set the appropriate Master Keys (DES and/or AES) under which your CKDS > is encrypted to access and alter its contents. This requires the use of > cryptographic hardware. (Which we don't have) > > This doesn't help me at all. I still don't have any idea's how to start. I am > just a rookie with ICSF. > How do I display the master key verification patterns ? > Where is this ? specified by "CSFCKDS" value in your KGUP data definition > statement > > We are z/OS V2.2. > > Any help would be appreciated. > > Thanks > > > > > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
