When you invoke the CSFPUTIL program as a batch job, you receive
the return code in a message when the job completes. The following
list describes the meanings of the return codes. Additional return
codes are described in
Return and reason codes for the CSFEUTIL program.
- Return
Code
- Meaning
- 0
- Process successful.
- 2
- Partially successful. Job completed but some tokens have not
been reenciphered.
- 4
- Parameters are incorrect. A possible cause of the error is that
the parameter 'ACTIVATE' was used. That parameter is no longer
supported; use 'REFRESH'.
- 8
- RACF authorization failed.
- 12, 72, or 104
- PKDS processing has failed. A return code 72 indicates the error
was detected with the new KDS. A return code 104 indicates the error
was detected with the old KDS.
When the program is invoked from another program, the invoking
program receives the reason code in General Register 0 along with
the return code in General Register 15. The meaning of the reason
codes are as follows:
Return code 0 has these reason
codes: - Reason Code
- Meaning
- 36137
- PKDS reencipher/Change MK processed only tokens encrypted under
the RSA master key.
- 36138
- PKDS reencipher/Change MK processed only tokens encrypted under
the ECC master key.
- 36139
- PKDS reencipher/Change MK processed tokens encrypted under the
RSA and ECC master keys.
Return code 8 has this reason
code: - Reason Code
- Meaning
- 3114
- Another refresh utility request is executing, and this utility
request will not be allowed to run.
- 3080
- Use of an unsupported token has been attempted. The usage of
this type of token is not supported on the release of ICSF currently
running.
Return code 12 has this reason code: - Reason
Code
- Meaning
- 36108
- PKA callable services are enabled, and the PKDS is the active
PKDS as specified in the options data set.
- 36116
- PKDS specified for reencipher or activate has incorrect dataset
attribute
An abend 18F Reason code x'300' occurs with a JCL error.