ICSF provides a utility program, CSFPUTIL, that performs certain functions that can also be performed using the administrator’s panels. In releases of ICSF prior to FMID HCR7780, you could use the CSFPUTIL utility program to initialize a PKDS, reencipher a PKDS, and refresh the in-storage copy of the PKDS. You can still use the CSFPUTIL utility to reencipher or refresh a PKDS. However, starting with FMID HCR7780, the CSFPUTIL utility program no longer supports the function to initialize a PKDS. Instead, the ICSF panels must be used to initialize a PKDS.
Because of this change, jobs that call the CSFPUTIL utility with the INITPKDS option will no longer initialize a PKDS, and return code 4 (which indicates that supplied parameters are incorrect) will be returned. If migrating from a release of ICSF prior to HCR7780 to HCR7780 or later, you should, prior to the first IPL, make sure no jobs call CSFPUTIL with the INITPKDS option. Use the administrator panels to initialize the PKDS instead.
For more information in initializing the PKDS and on the CSFPUTIL utility, refer to z/OS Cryptographic Services ICSF Administrator's Guide.