z/OS Cryptographic Services System SSL Programming
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


GSK01054E

z/OS Cryptographic Services System SSL Programming
SC14-7495-00

GSK01054E
SSL server starting in non-FIPS mode. Status status-code

Explanation

The environment variable GSK_FIPS_STATE was specified in the envar file in the GSKSRVR home directory, yet the started task was unable to execute in FIPS mode. The started task is started in non-FIPS mode.

If the indicated CMS status code is zero, then the value that is specified for the environment variable was not GSK_FIPS_STATE_ON, so FIPS mode was not attempted. If the indicated CMS status code is non-zero, an attempt was made to set FIPS mode but failed.

The System SSL started task continues to execute in non-FIPS mode. In non-FIPS mode, GSKSRVR does not provide sysplex session ID caching for FIPS mode application servers. Sysplex session ID caching is provided only for non-FIPS mode application servers.

User response

If the indicated status is zero, correct the environment variable GSK_FIPS_STATE so that it either specifies the value 'GSK_FIPS_STATE_ON' or remove the environment variable if FIPS mode is not required for the started task. If the indicated status is non-zero, see CMS status codes (03353xxx) for information about the reported status code.

Collect a System SSL trace of the failing application and contact your service representative if the error persists.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014