A fix is available
APAR status
Closed as program error.
Error description
SYSTEM newlist field icsf_P11_MKVP_date not reported correctly. This results in the "Date and time last set" being empty in RE.K.M for the "P11 MK" row, which relates to the date and time when the PKCS #11 master key was last changed, and when the master key verification pattern was stored in the TKDS.
Local fix
N/A
Problem summary
**************************************************************** * USERS AFFECTED: Users of zSecure Audit exploiting the * * 'Master key verification patterns and last * * change dates' report (CARLa newlist type * * SYSTEM, field icsf_P11_MKVP_date). * **************************************************************** * PROBLEM DESCRIPTION: zSecure Audit might might report the * * 'Date and time last set' field for the * * PKCS11 master key (CARLa field * * icsf_P11_MKVP_date) as empty. * **************************************************************** * RECOMMENDATION: Apply the PTF provided. * **************************************************************** When the date that the TKDS header P11 master key verification pattern was stored is set in the token data set, zSecure Audit might still report it as empty.
Problem conclusion
zSecure Audit has been modified, so that it properly reports the 'Date and time last set' field for the PKCS11 master key (CARLa field icsf_P11_MKVP_date).
Temporary fix
Comments
APAR Information
APAR number
OA66874
Reported component name
ZSEC BASE,ADMIN
Reported component ID
5655T0100
Reported release
310
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2024-08-16
Closed date
2024-08-21
Last modified date
2024-09-03
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UJ95819
Modules/Macros
CKRCFV GKRCFV
Fix information
Fixed component name
ZSEC BASE,ADMIN
Fixed component ID
5655T0100
Applicable component levels
R310 PSY UJ95819
UP24/08/29 P F408
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"310","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Document Information
Modified date:
03 September 2024