PH16040: DSNL046I MESSAGES AFTER CRYPTO HARDWARE TOGGLED OFF/ON

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• DB2DDF DDF AES
  Allow retry of ICSF CSNFPKE calls, after DSNL045I CSNFPKE C/2B34
  and DSNL046I messages, without requiring a restart of DDF or
  Db2.
  
  
  Additional Keywords and Sypmtoms:
  **************************************
  DSNL046I ICSF CSNFPKE
  DSNL045I CSNFPKE C/2B34 2B34
  

Local fix

• recycle of DB2 will clear the message
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All Distributed Data Facility (DDF) users.                   *
  * Specifically where remote clients utilize                    *
  * AES encryption security mechanism to                         *
  * encrypt security credentials when accessing                  *
  * a Db2 for z/OS server.                                       *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Remote client application access                             *
  * attempt failed and Db2 for z/OS                              *
  * message DSNL046I was issued.                                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply corrective PTF when available                          *
  ****************************************************************
  A remote client application attempts to access a Db2 for z/OS
  server, using AES encryption security mechanism to encrypt
  the user ID and password, and fails.  In this case, z/OS ICSF
  detected an internal error which caused Db2 to fail the remote
  connection request.  Furthermore, Db2 remembers (via an
  internal flag) the ICSF error and prevents future remote
  connection requests (that specifies AES encryption security
  mechanism) to access the Db2 server.
  Note: To clear the internal flag that Db2 uses to remember
  the status of ICSF, a recycle of Db2 (stop and start) is
  required.
  

Problem conclusion

• Db2 12 for z/OS server has been changed to periodically (every
  2 minutes) reset the internal flag that remembers the status of
  ICSF.
  Note: Message DSNL046I may appear on the system console more
  frequently after applying this APAR.  This occurs because
  whenever an ICSF error is detected, Db2 will issue message
  DSNL046I, if the message hasn't been issued within the last 5
  minutes.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI68732

Modules/Macros

• DSNLEDDA
  

Fix information

• Fixed component name

  DB2 OS/390 & Z/

• Fixed component ID

  5740XYR00

Applicable component levels

• RC10 PSY UI68732

     UP20/04/08 P F004

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.