PH64997: Message DFHH0504 is invalidly produced for an ECI connection

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• DFHH0504 says AUTHENTICATE no or basic is used for non-SSL
  TCPIPSERVICES.
  
  For ECI connection AUTHENTICATE attribute is invalid and by
  default Authenticate is NO.
  Additionally, it also doesn't have SSL attribute available to be
  used. This will always be reported as a security issue, causing
  concerns to local system programmers.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS Users                               *
  ****************************************************************
  * PROBLEM DESCRIPTION: DFHH0504 CICS health check              *
  *                      message is always issued for ECI        *
  *                      connections, even though the            *
  *                      AUTHENTICATE attribute is not           *
  *                      valid in this context, and the default  *
  *                      setting is AUTHENTICATE(NO).            *
  ****************************************************************
  The DFHH0504 message states that AUTHENTICATE(NO) or
  AUTHENTICATE(BASIC) is used for non-SSL TCPIPSERVICES,
  which can be misleading.
  
  For ECI connections, the AUTHENTICATE attribute is not valid
  and defaults to NO. Additionally, ECI does not support the SSL
  attribute. As a result, this message is always reported as a
  potential security issue.
  

Problem conclusion

• Message DFHH0504 has been updated to eliminate references to the
  AUTHENTICATE attribute and to provide guidance on securing
  TCPIPS connections.
  
  The DFHH0504 message is now issued as:
  "Non-SSL TCPIPSERVICES are in use" when connections are
  configured with SSL(NO).
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UO05433 UO05434 UO05435

Modules/Macros

• DFHHCC5  DFHHZMSG DFJ@H620
  

Fix information

• Fixed component name

  CICS TS Z/OS V6

• Fixed component ID

  5655YA100

Applicable component levels

• R400 PSY UO05435

     UP25/10/22 P F510

• R500 PSY UO05434

     UP25/10/23 P F510

• R600 PSY UO05433

     UP25/10/23 P F510

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.