Back-level ICSF releases in the sysplex

The coordinated CKDS change master key and coordinated CKDS refresh functions are only available if all ICSF instances in the CKDS sysplex group are running FMID HCR7790 or later. If an ICSF instance at a level lower than HCR7790 joins the sysplex group, a CSFM631I message (indicating all downlevel systems) will be written to the ICSF job log and the operation will fail.

The coordinated PKDS change master key and coordinated PKDS refresh functions are only available if all ICSF instances in the PKDS sysplex groups are running FMID HCR77A0 or later. If an ICSF instance at a level lower than HCR77A0 joins the sysplex group, a CSFM631I message (indicating all downlevel systems) will be written to the ICSF job log and the operation will fail.

The coordinated TKDS change master key function is only available if all ICSF instances in the TKDS sysplex groups are running FMID HCR77A0 or later. If an ICSF instance at a level lower than HCR77A0 joins the sysplex group, a CSFM631I message (indicating all downlevel systems) will be written to the ICSF job log and the operation will fail.

To resolve this problem, all downlevel systems must either be removed from the KDS sysplex group or upgraded to the required level or higher. If this is not possible, the coordinated change master key and coordinated refresh functions cannot be used. The local CKDS change master key, local CKDS refresh, local PKDS change master key, and local PKDS refresh can be used with ICSF instances running at supported FMID levels. The TKDS does not have a local change master key, local refresh, or coordinated refresh function.