IBM Support

OA66874: SYSTEM NEWLIST FIELD ICSF_P11_MKVP_DATE NOT REPORTED CORRECTLY

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • SYSTEM newlist field icsf_P11_MKVP_date not reported correctly.
    
    This results in the "Date and time last set" being empty in
    RE.K.M for the "P11 MK" row, which relates to the date and time
    when the PKCS #11 master key was last changed, and when the
    master key verification pattern was stored in the TKDS.
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Audit exploiting the        *
    *                 'Master key verification patterns and last   *
    *                 change dates' report (CARLa newlist type     *
    *                 SYSTEM, field icsf_P11_MKVP_date).           *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Audit might might report the    *
    *                      'Date and time last set' field for the  *
    *                      PKCS11 master key  (CARLa field         *
    *                      icsf_P11_MKVP_date) as empty.           *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    When the date that the TKDS header P11 master key verification
    pattern was stored is set in the token data set, zSecure
    Audit might still report it as empty.
    

Problem conclusion

  • zSecure Audit has been modified, so that it properly reports the
    'Date and time last set' field for the PKCS11 master key (CARLa
    field icsf_P11_MKVP_date).
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA66874

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    310

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2024-08-16

  • Closed date

    2024-08-21

  • Last modified date

    2024-09-03

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ95819

Modules/Macros

  • CKRCFV   GKRCFV
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R310 PSY UJ95819

       UP24/08/29 P F408

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"310","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
03 September 2024