Return and reason codes for the CSFPUTIL program

When you invoke the CSFPUTIL program as a batch job, you receive the return code in a message when the job completes. The following list describes the meanings of the return codes. Additional return codes are described in Return and reason codes for the CSFEUTIL program.
Return Code
Meaning
0
Process successful.
2
Partially successful. Job completed but some tokens have not been reenciphered.
4
Parameters are incorrect. A possible cause of the error is that the parameter 'ACTIVATE' was used. That parameter is no longer supported; use 'REFRESH'.
8
RACF authorization failed.
12, 72, or 104
PKDS processing has failed. A return code 72 indicates the error was detected with the new KDS. A return code 104 indicates the error was detected with the old KDS.

When the program is invoked from another program, the invoking program receives the reason code in General Register 0 along with the return code in General Register 15. The meaning of the reason codes are as follows:

Return code 0 has these reason codes:
Reason Code
Meaning
36137
PKDS reencipher/Change MK processed only tokens encrypted under the RSA master key.
36138
PKDS reencipher/Change MK processed only tokens encrypted under the ECC master key.
36139
PKDS reencipher/Change MK processed tokens encrypted under the RSA and ECC master keys.
Return code 8 has this reason code:
Reason Code
Meaning
3114
Another refresh utility request is executing, and this utility request will not be allowed to run.
3080
Use of an unsupported token has been attempted. The usage of this type of token is not supported on the release of ICSF currently running.
Return code 12 has this reason code:
Reason Code
Meaning
36108
PKA callable services are enabled, and the PKDS is the active PKDS as specified in the options data set.
36116
PKDS specified for reencipher or activate has incorrect dataset attribute

An abend 18F Reason code x'300' occurs with a JCL error.