ICSF: Accommodate the TRACEENTRY option deprecation in the installation options data set

Note: The FMID HCR77A1 ICSF level is not integrated in z/OS V2R1 and needs to be downloaded and installed even after ordering a z/OS V2R1 ServerPac. The Cryptographic web deliverable is available at the following web site: http://www.ibm.com/systems/z/os/zos/downloads/.

Starting with ICSF HCR77A1, option TRACEENTRY has been deprecated and ICSF CTRACE support has been enhanced to support configurable ICSF CTRACE options from PARMLIB. A default CTICSF00 PARMLIB member is installed in SYS1.PARMLIB. The CTICSF00 PARMLIB member provides default component trace values for ICSF. By default, ICSF CTRACE support will trace with the KdsIO, CardIO, and SysCall filters using a 2M buffer. Configurable options are commented out within this PARMLIB member to provide examples of how to turn them on.

Element or feature:

Cryptographic Services

When change was introduced:

Cryptographic Support for z/OS V1R13 - z/OS V2R1 web deliverable (FMID HCR77A1), which installs only on z/OS V1R13 or z/OS V2R1.

Applies to migration from:

z/OS V2R1 and z/OS V1R13 without the Cryptographic Support for z/OS V1R13 - z/OS V2R1 web deliverable (FMID HCR77A1). Note that when the Cryptographic Support for z/OS V1R13 - z/OS V2R1 Web deliverable (FMID HCR77A1) is not installed, this migration item is not applicable.

Timing:

After the first IPL of z/OS V2R1.

Is the migration action required?

Yes, if you have installed the Cryptographic Support for z/OS V1R13 – z/OS V2R1 web deliverable (FMID HCR77A1) to handle TKDS with PKDS #11 objects for the new format in HCR77A1.

Target system hardware requirements:

None.

Target system software requirements:

None.

Other system (coexistence or fallback) requirements:

None.

Restrictions:

None.

System impacts:

If the TRACEENTRY option is specified it will be ignored and will produce message CSFO0212 at startup; processing continues.

Related IBM Health Checker for z/OS check:

None.

Steps to take You can code the new CTRACE option within a BEGIN(HCR77A1) END option pair in a options data set shared between multiple releases of ICSF.

If you share the installation options data set between HCR77A1 and pre-HCR77A1 systems, you can continue to supply the TRACEENTRY option at the lower level systems as it is ignored, and processing will continue on the HCR77A1 systems.
If your installation cannot tolerate the CSFO0212 message that is issued at startup, you need to use different installation option data sets. Note that new CTRACE options will be in effect:
- Review the default CTRACE options to ensure that they are satisfactory for your system.
- Make any necessary changes. Use the CTICSF00 PARMLIB to create customized ICSF CTRACE Configuration Data Sets in PARMLIB. You can use the new CTRACE option to specify the customized ICSF CTRACE Configuration Data Set in the ICSF Options Data Set.
  For example, you can specify CTRACE(CTICSFxx), where xx is any two characters that were used when copying the default CTICSF00 parmlib member.
  
  Component tracing is active when ICSF starts using the trace options defined in the CTICSFxx PARMLIB member, where 00 is the default. If the CTICSF00 PARMLIB member is incorrect or missing, ICSF CTRACE performs tracing using an internal default set of trace options. The operator can specify trace options individually on the TRACE CT command or specify the name of a CTICSFxx PARMLIB member containing the desired trace options. Using a PARMLIB member on the TRACE CT command can help minimize operator intervention and avoid syntax or keystroke errors

Reference information : z/OS Cryptographic Services ICSF Administrator's Guide

For information about TKDS, see z/OS Cryptographic Services ICSF System Programmer's Guide.
For IBM Health Checker, see IBM Health Checker for z/OS User's Guide.