A fix is available
APAR status
Closed as new function.
Error description
New Function FIXCAT - E3931/K , SMFREC/K ******************************************* THE FOLLOWING PTFS ARE IN ERROR: UJ92803 R7D1 UJ92802 R7D2 THESE PTFS ARE FIXED BY APAR OA65566, which has also been PE'd and is now fixed by OA66124. *******************************************
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: ICSF users * **************************************************************** * PROBLEM DESCRIPTION: New function - exploitation for z16 * * GA 1.5 * * * * Support for operational X9.143 key * * blocks * * * * Support for OAEP 2.1 * **************************************************************** Summary --------------------------------------------------------------- Support for z16 GA 1.5 is added to ICSF 1. Support for operational X9.143 key blocks 2. Support for OAEP 2.1 X9.143 Key Blocks ================= The following callable services were either created or had significant updates to support key blocks: ---------------------------------------------------------------- TR-31 Create (CSNBT31C) -- new service to create key blocks TR-31 Translate (CSNBT31X) previously TR-31 Export -- updated to support importing, exporting, translating, compliance-checking, and compliance-tagging key blocks. The following callable services were updated to support key blocks: ---------------------------------------------------------------- Managing symmetric cryptographic keys 1. Data Key Export -- CSNBDKX 2. Data Key Import -- CSNBDKM 3. Diversified Key Generate -- CSNBDKG 4. Diversified Key Generate2 -- CSNBDKG2 5. Diversify Directed Key -- CSNBDDK 6. ECC Diffie-Hellman -- CSNDEDH 7. Key Export -- CSNBKEX 8. Key Generate -- CSNBKGN 9. Key Generate2 -- CSNBKGN2 10. Key Import -- CSNBKIM 11. Key Part Import2 -- CSNBKPI2 12. Key Test2 -- CSNBKYT2 13. Key Translate2 -- CSNBKTR2 14. Multiple Secure Key Import -- CSNBSKM 15. PKA Encrypt -- CSNDPKE 16. Random Number Generate Long -- CSNBRNGL 17. Restrict Key Attribute -- CSNBRKA 18. Secure Key Import2 -- CSNBSKI2 19. Symmetric Key Export -- CSNDSYX 20. Symmetric Key Export with Data -- CSNDSXD 21. Symmetric Key Generate -- CSNDSYG 22. Symmetric Key Import2 -- CSNDSYI2 23. Unique Key Derive -- CSNBUKD TR-31 symmetric key management 1. TR-31 Import -- CSNBT31I Protecting data 1. Cipher Text Translate2 -- CSNBCTT2 and CSNBCTT3 2. Decipher -- CSNBDEC and CSNBDEC1 3. Encipher -- CSNBENC and CSNBENC1 4. Symmetric Algorithm Decipher -- CSNBSAD and CSNBSAD1 5. Symmetric Algorithm Encipher -- CSNBSAE and CSNBSAE1 6. Symmetric Key Decipher -- CSNBSYD and CSNBSYD1 7. Symmetric Key Encipher -- CSNBSYE and CSNBSYE1 Verifying data integrity and authenticating messages 1. HMAC Generate -- CSNBHMG and CSNBHMG1 2. HMAC Verify -- CSNBHMV and CSNBHMV1 3. MAC Generate -- CSNBMGN and CSNBMGN1 4. MAC Generate2 -- CSNBMGN2 and CSNBMGN3 5. MAC Verify -- CSNBMVR and CSNBMVR1 6. MAC Verify2 -- CSNBMVR2 and CSNBMVR3 Financial services 1. Authentication Parameter Generate -- CSNBAPG 2. Clear PIN Encrypt -- CSNBCPE 3. Clear PIN Generate -- CSNBPGN 4. Clear PIN Generate Alternate -- CSNBCPA 5. Encrypted PIN Generate -- CSNBEPG 6. Encrypted PIN Translate2 -- CSNBPTR2 7. Encrypted PIN Translate Enhanced -- CSNBPTRE 8. Encrypted PIN Verify -- CSNBPVR 9. Encrypted PIN Verify2 -- CSNBPVR2 10. Field Level Decipher -- CSNBFLD 11. Field Level Encipher -- CSNBFLE 12. Format Preserving Algorithms Decipher -- CSNBFFXD 13. Format Preserving Algorithms Encipher -- CSNBFFXE 14. Format Preserving Algorithms Translate -- CSNBFFXT 15. FPE Decipher -- CSNBFPED 16. FPE Encipher -- CSNBFPEE 17. FPE Translate -- CSNBFPET 18. PIN Change/Unblock -- CSNBPCU 19. Recover PIN from Offset -- CSNBPFO 20. Secure Messaging for Keys -- CSNBSKY 21. Secure Messaging for PINs -- CSNBSPN 22. Transaction Validation -- CSNBTRV 23. VISA CVV Service Generate -- CSNBCSG 24. VISA CVV Service Verify -- CSNBCSV TR-34 symmetric key management 1. TR-34 Key Distribution -- CSNDT34D 2. TR-34 Key Receive -- CSNDT34R Managing PKA cryptographic key 1. PKA Key Generate -- CSNDPKG 2. PKA Key Import -- CSNDPKI 3. PKA Key Translate -- CSNDPKT Key data set management 1. CKDS Key Record Create2 -- CSNBKRC2 2. CKDS Key Record Read2 -- CSNBKRR2 3. CKDS Key Record Write2 -- CSNBKRW2 The following utilities were updated to support key blocks: ----------------------------------------------------------- 1. CKDS Keys Check 2. CKDS Reencipher 3. CKDS KEYS 4. Key Generator Utility Program (KGUP) The following SMF records were updated to support key blocks: ----------------------------------------------------------- 1. SMF Type 82 Subtype 31 2. SMF Type 82 Subtype 40 3. SMF Type 82 Subtype 44 4. SMF Type 82 Subtype 48 OAEP 2.1 ======== The following services were updated to support OAEP 2.1: 1. PKA Key Encrypt -- CSNDPKE 2. PKA Key Decrypt -- CSNDPKD Notes: 1. Callable service changes apply to both the 31-bit and 64-bit services equally. 2. CKDS label support for operational X9.143 key blocks is only available on HCR77D2.
Problem conclusion
Temporary fix
Comments
All the enhancements included in this APAR will be documented in the HCR77D2 release of the following ICSF publications: ICSF Overview SC14-7505 ICSF Administrator's Guide SC14-7506 ICSF System Programmer's Guide SC14-7507 ICSF Application Programmer's Guide SC14-7508 ICSF Messages SC14-7509 Note: CKDS label support for operational X9.143 key blocks is only available on HCR77D2. ×**** PE23/09/19 FIX IN ERROR. SEE APAR OA65566 FOR DESCRIPTION
APAR Information
APAR number
OA61978
Reported component name
ICSF/MVS
Reported component ID
568505101
Reported release
7D1
Status
CLOSED UR1
PE
NoPE
HIPER
NoHIPER
Special Attention
YesSpecatt / New Function / Xsystem
Submitted date
2021-08-16
Closed date
2023-05-12
Last modified date
2024-02-12
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UJ92802 UJ92803
Modules/Macros
CSFBHCK0 CSFBHCN0 CSFCCVE CSFCHD20 CSFCHP40 CSFCKD20 CSFCMP40 CSFCMPCC CSFCMPLC CSFCMPTC CSFDBRCM CSFDBRKA CSFDBRKS CSFDCKDS CSFDCST CSFDDMRL CSFDDUPU CSFDINIT CSFDLL31 CSFDLL3X CSFDLL64 CSFDS21 CSFENCFM CSFENGSP CSFGIBTN CSFGICKH CSFGICKT CSFGICTF CSFGICVE CSFGIDCT CSFGIFLT CSFGIHTD CSFGIIOC CSFGIKDS CSFGIKGC CSFGIKTB CSFGIPD2 CSFGISB CSFGISTC CSFGIWMB CSFGIWMM CSFHDR01 CSFHDR03 CSFHH001 CSFHH003 CSFHL001 CSFHL002 CSFHL003 CSFHX001 CSFHX002 CSFHX003 CSFHX004 CSFHX005 CSFHX006 CSFINIT2 CSFINPV2 CSFINPVT CSFKG100 CSFKG120 CSFKG400 CSFKG420 CSFKSCDL CSFKSCMV CSFKSCS1 CSFKSCS2 CSFKSCS4 CSFKSHKT CSFKSHTB CSFKSHTM CSFKSICE CSFKSIOV CSFKSIPE CSFKSKST CSFKSMPT CSFMCKDS CSFMIAKP CSFMICMP CSFMICPD CSFMIKUB CSFMIKUT CSFMIMGM CSFMIMKV CSFMIQNQ CSFMIRDT CSFMISDT CSFMISTI CSFMISTT CSFMISTU CSFMIWMB CSFMIWMP CSFMKVPR CSFNCAPG CSFNCCPA CSFNCCPE CSFNCCSG CSFNCCSV CSFNCCT2 CSFNCDC2 CSFNCDEC CSFNCDG2 CSFNCDKG CSFNCDKM CSFNCDKX CSFNCEDH CSFNCENC CSFNCEPG CSFNCFPD CSFNCFPE CSFNCFPT CSFNCFXD CSFNCFXE CSFNCFXT CSFNCHMG CSFNCHMV CSFNCIQF CSFNCKDL CSFNCKEX CSFNCKG2 CSFNCKGN CSFNCKIM CSFNCKP2 CSFNCKT2 CSFNCKTC CSFNCKY2 CSFNCKYT CSFNCMDW CSFNCMGN CSFNCMVR CSFNCPCI CSFNCPCU CSFNCPFO CSFNCPGN CSFNCPKD CSFNCPKE CSFNCPKG CSFNCPKI CSFNCPKT CSFNCPRB CSFNCPT2 CSFNCPTE CSFNCPV2 CSFNCPVR CSFNCRFR CSFNCRKA CSFNCRNC CSFNCRNL CSFNCSAD CSFNCSAE CSFNCSK2 CSFNCSKM CSFNCSKY CSFNCSPN CSFNCSTC CSFNCSXD CSFNCSY2 CSFNCSYG CSFNCSYX CSFNCT3C CSFNCT3I CSFNCT3O CSFNCT3P CSFNCT3R CSFNCT3X CSFNCT4D CSFNCT4R CSFNCTRV CSFNCUKD CSFNCUSK CSFNCVMK CSFPLMWT CSFPLSMK CSFSD001 CSFSD002 CSFSD003 CSFSD004 CSFSD005 CSFSD006 CSFSMBTI CSFSMBTM CSFSMF82 CSFSMFR CSFT31C CSFT31C6 CSFTHTP3 CSFVCAPC CSFVCBRC CSFVCEVT CSFVCFLE CSFVCKC2 CSFVCKR2 CSFVCKRD CSFVCKW2 CSFVCSYD CSFVCSYE CSFVCVCK CSFWTL01 CSNPCA3X CSNPCA64 CSNPCAPI CSNPCI3X CSNPCI64 CSNPCINT CSNPCU3X CSNPCU64 CSNPCUTL
| SC147505. | SC147506. | SC147507. | SC147508. | SC147509. |
Fix information
Fixed component name
ICSF/MVS
Fixed component ID
568505101
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU011","label":"Systems - zSystems software"},"Product":{"code":"SG19O"},"Platform":[{"code":"PF054","label":"z Systems"}],"Version":"7D1"}]
Document Information
Modified date:
13 February 2024