IBM Support

OA61042: ZSECURE MIGHT INCORRECTLY DISPLAY KEY LENGTH AS 56 FOR DOUBLE- AND TRIPLE-LENGTH DES KEYS

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • zSecure might incorrectly display key length as 56 for double-
    and triple-length DES keys
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Collect processing active   *
    *                 ICSF Cryptographic Key Data Set information. *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Collect writes incomplete       *
    *                      ICSF Symmetric keys information so that *
    *                      zSecure Audit might display DES key     *
    *                      length as 56 for double- and            *
    *                      triple- length keys.                    *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    When double- and triple-length DES keys are defined, zSecure
    Collect might write incomplete information about such keys into
    CKFREEZE data sets so that zSecure Audit displays key length for
    these keys as 56.
    

Problem conclusion

  • zSecure Collect has been modified so that it processes double-
    and triple-length DES keys information correctly so that zSecure
    Audit displays the right length for such keys.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA61042

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    240

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2021-03-17

  • Closed date

    2021-03-23

  • Last modified date

    2021-04-01

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ05098 418PC4Ÿ 418PC4Ÿ

Modules/Macros

  • CKFCAT
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R240 PSY UJ05098

       UP21/03/24 P F103

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"240"}]

Document Information

Modified date:
02 April 2021