EZD0938I   Unsupported algorithm ( algorithm ) found in transform

Explanation

The IKE negotiation failed because the algorithm specified in a transform is not supported.

Additional diagnostic messages that have the same message instance number will be issued to identify the impacted Security Association (SA). The message instance number precedes the message number in the log output and is used to group related messages from the IKE daemon.

In the message text:
algorithm
The numerical value of the unsupported algorithm. Supported algorithms for IKE SAs are described in Policy Agent and policy applications in z/OS Communications Server: IP Configuration Reference. Phase 1 algorithms are specified on a KeyExchangeOffer statement, and phase 2 transforms are specified on an IpDataOffer statement. Go to the http://www.iana.org/assignments/isakmp-registry website for additional information about algorithm number assignments.

System action

The SA negotiation failed; IKE daemon processing continues.

Operator response

Contact the system programmer.

System programmer response

Notify the administrator of the remote security endpoint about this error and ask the administrator to ensure that all hash, encryption, and authentication algorithms are specified correctly for all transforms.

Module

ipsecklen.cpp, oakley_mf.cpp

Procedure name

None.