EZD0926I   Transform transform_id : key length specified for fixed key length algorithm or the algorithm is not supported

Explanation

An IKE negotiation failed because a key length is specified for an algorithm that has a fixed key length or the algorithm is unsupported.

Additional diagnostic messages that have the same message instance number will be issued to identify the impacted Security Association (SA). The message instance number precedes the message number in the log output and is used to group related messages from the IKE daemon.

transform_id is the value that is used to identify this transform in an IKE proposal. Supported transforms for IKE SAs are described in Policy Agent and policy applications in z/OS Communications Server: IP Configuration Reference. Phase 1 transforms are specified on a KeyExchangeOffer statement, and phase 2 transforms are specified on an IpDataOffer statement.

System action

The SA negotiation failed; IKE daemon processing continues.

Operator response

Request that the administrator of the remote security endpoint verify that their transform algorithms are specified correctly.

System programmer response

None.

Module

ah_lf.cpp, esp_lf.cpp, oakley_lf.cpp

Procedure name

None.