IBM Support

OA67217: EMPTY DATASETS INCORRECTLY REPORTED WITH "EMPTY ENCR. CELLS" IN CKF0517 WITH SYMKEYTEST=Y

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Empty datasets incorrectly reported with "empty encr. cells" in
    CKF0517 with SYMKEYTEST=Y.
    
    With empty datasets, the verification code is missing from the
    VVDS record, but CKFCOLL incorrectly reports this as an empty
    encryption cell.
    

Local fix

  • N/A
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Collect performing the      *
    *                 symmetric key usability test for encrypted   *
    *                 data sets (running the program with the      *
    *                 SYMKEYTEST=YES parameter).                   *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Collect might incorrectly       *
    *                      report the number of data sets that     *
    *                      have empty encryption cells by          *
    *                      informational message CKF0517.          *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided and review the        *
    *                 documentation updates.                       *
    ****************************************************************
    When an encrypted data set is created but neither updated nor
    accessed (the data set is empty), the zSecure Collect assumes
    that such data set does not have encryption cells resulting in
    incorrect statistics reported by the informational MSGCKF0517.
    

Problem conclusion

  • zSecure Collect has been modified, so that empty encrypted data
    sets are not counted as data sets with empty encryption cells.
    As results, the informational MSGCKF0517 displays correct
    statistics. Please note the documentation changes provided by
    the APAR tracking comment data.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA67217

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    310

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2024-11-12

  • Closed date

    2025-04-10

  • Last modified date

    2025-05-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ96963

Modules/Macros

  • CKFRACF  CKFVVDS
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R310 PSY UJ96963

       UP25/04/11 P F504

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"310","Line of Business":{"code":"LOB70","label":"Z TPS"}}]

Document Information

Modified date:
02 May 2025