DSNL045I csect-name ICSF function-name FUNCTION FAILED WITH RETCODE='return-code'X AND RSNCODE='reason-code'X
Explanation
Db2 for z/OS made an Integrated Cryptographic Service Facility (ICSF) call because a connection to a remote server or a connection from a remote requester is using encryption, but the ICSF call returned an unexpected return code.
Db2 for z/OS uses ICSF to perform the following functions:
- Creating connection keys
- Generating a shared private key
- Encrypting data
- Decrypting data
- csect-name
- The name of the control section that issued the message.
- function-name
- The name of the ICSF call that returned the unexpected return code. The possible values are:
- CSNERNG: Random Number Generate
- CSNECKM: Multiple Clear Key Import
- CSNFPKB: Key Token Build
- CSNFPKE: Key Encrypt
- CSNEENC: Encipher data.
- CSNEDEC: Decipher data
- CSNESYE: Symmetric Encipher
- CSNESYD: Symmetric Decipher
- CSNEOWH: MD5 Hash
- return-code
- The hexadecimal value of the ICSF return code.
- reason-code
- The hexadecimal value of the ICSF reason code.
System action
The encryption function cannot be processed. Db2 retries the ICSF services call every two minutes and reissues this message each time that the call fails.
System programmer response
If the encryption facility is not installed, take one of the following actions:
- Install the encryption facility before requesting encryption.
- Update the driver settings of the remote clients to not request encryption for connections to the Db2 for z/OS server.
If the encryption facility is installed, verify that it is working correctly. Look up the return code and reason code in the ICSF documentation for help in finding and fixing the problem.