OA67471: IBM ZSECURE SUITE MIGHT CAUSE Z/OS SYSTEM LOCK DUE TO RACF DATABASE ENQ CONTENTION IN SYSPLEX ENVIRONMENT.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• When a SYSZRACF value for the ENQ serialization option is
  supplied to the zSecure CARLa engine (CKRCARLA), it might cause
  z/OS system lock due to RACF Database ENQ contention in sysplex
  environment. This behavior was introduced by zSecure October
  2024 service stream enhancement.
  

Local fix

• Do not use a SYSZRACF value for the ENQ serialization option for
  the zSecure CARLa engine (CKRCARLA).
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Admin, Audit, and Alert     *
  *                 exploiting zSecure's ENQ serialization       *
  *                 option for a resource identified by the      *
  *                 SYSZRACF qname.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: zSecure product might cause a z/OS      *
  *                      system lock due to RACF Database ENQ    *
  *                      contention in sysplex environment.      *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided.                      *
  ****************************************************************
  When a SYSZRACF value for the ENQ serialization option is
  supplied to the zSecure CARLa engine (CKRCARLA), it might cause
  z/OS system lock due to RACF Database ENQ contention in sysplex
  environment.
  

Problem conclusion

• zSecure CARLa engine (CKRCARLA) has been modified, so that it
  does not cause z/OS system lock in cases where a SYSZRACF qname
  is provided to the ENQ serialization option.
  

Temporary fix

Comments

• ×**** PE25/08/29 FIX IN ERROR. SEE APAR OA68434  FOR DESCRIPTION
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ97044

Modules/Macros

• C2PSALLC C2PSPAS1 CKRCLOSE CKRENQ   CKRMAIN  GKRCLOSE GKRENQ
  GKRMAIN
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R310 PSY UJ97044

     UP25/04/29 P F504

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.