Parameters

All mainline exits receive an address list that uses standard entry linkage. Register 1 points to the address list. Each address in the list points to a parameter. Tables in the next four topics describe the parameters for each of the mainline exits.

CSFEXIT1

This table describes the parameters for CSFEXIT1:

Table 1. CSFEXIT1 parameters
Parameter Number of Bytes Description
1 8 The data set name (DDNAME) of the installation options data set.
2 Variable The command input block for the START command. The command control block is mapped by IEZCIB.

When ICSF calls this, the Cryptographic Communication Vector Table exists, but the table is not yet complete.

CSFEXIT2 and CSFEXIT3

Both CSFEXIT2 and CSFEXIT3 receive the same parameters. Table 2 describes these parameters.

Table 2. CSFEXIT2 and CSFEXIT3 parameters
Parameter Number of Bytes Description
1 44 A character string that is the CKDS name specified in the CKDSN installation option.
2 4 A decimal value that is the maximum length permitted for data passed to services specified in the MAXLEN installation option.

Beginning with z/OS V1 R2, the MAXLEN parameter may still be specified in the options data set, but only the maximum value limit will be enforced (2147483647). If a value greater than this is specified, an error will result and ICSF will not start.

3 4 ICSF environmental options.
Note: Do not change bits 1 - 5.
Byte 1:
Bit
Meaning When Set On
0
Special secure mode enabled.
1 - 5
Reserved.
6
Security Sever (RACF) checking required for authorized callers.
7
PCF coexistence.

Bytes 2–4: Reserved

4 4 Address of the exit name table. Table 4 describes the exit name table.

CSFEXIT4 and CSFEXIT5

Both CSFEXIT4 and CSFEXIT5 receive the same parameters. Table 3 describes these parameters.

Table 3. CSFEXIT4 and CSFEXIT5 parameters
Parameter Number of Bytes Description
1 44 A character string that is the CKDS name specified in the CKDSN installation option.
2 4 A decimal value that is the maximum length permitted for data passed to services specified in the MAXLEN installation option.

Beginning with z/OS V1 R2, the MAXLEN parameter may still be specified in the options data set, but only the maximum value limit will be enforced (2147483647). If a value greater than this is specified, an error will result and ICSF will not start.

3 4 ICSF environmental options.
Note: Do not change bits 1 - 5.
Byte 1:
Bit
Meaning When Set On
0
Special secure mode enabled.
1 - 5
Reserved.
6
Security Server (RACF) checking required for authorized callers.
7
PCF coexistence.

Bytes 2–4: Reserved

4 4 Address of the exit name table. Table 4 describes the exit name table.
5 Variable The command input block. You can use the IEZCIB mapping macro to map the control block.

The Exit Name Table

The exit name table contains a list of all of the exits and their load module names. Table 4 describes the format of the exit name table.

Table 4. Format of the Exit Name table
Offset (Dec) Number of Bytes Description
0 4 Exit name table ID. The value is always the character string ENT.
4 2 Exit name table version. The value is always the character string 01.
6 2 Length of the exit name table. This value is in decimal.
8 4 Number of entries in the array which is the number of exits ICSF supplies. This value is in decimal.
12 4 Subpool that the exit name table is in.
16 4 Reserved.
20 4 Reserved.
24 4 Reserved.
28 4 Reserved.
32 8 ICSF exit name 1. This value is a character string.
40 8 Installation load module name 1. This value is a character string.
48 4 Flags.

Flag bytes. Only the first two bytes are used; bytes 3 and 4 are reserved.

Byte 1:
Bit
Meaning When Set On
0
Exit has been requested by the installation.
1
Exit has been loaded.
2
Exit is active.
3
If exit fails, end ICSF.
4
If exit fails, do not call the exit again.
5
If exit fails, fail the service.
6
If exit fails, do nothing.
7
Exit has failed previously.
Byte 2:
Bit
Meaning When Set On
0
The exit should be called.
1
The exit is available to the installation.
2
If the security exit fails, fail the service.
3–7
Reserved.
52 4 Address of the exit.
56 4 Reserved.
60 4 Reserved.
64 8 ICSF exit name 2. This value is a character string.
72 8 Installation load module name 2. This value is a character string.
80 4 Flags.

See offset +48 for flag byte definitions.

84 4 Address of the exit.
88 4 Reserved.
92 4 Reserved.
x 8 ICSF exit name a.
x+8 8 Installation load module name a.
x+16 4 Flags.

See offset +48 for flags.

x+20 4 Address of the exit.
x+24 4 Reserved.
x+28 4 Reserved.