PH68728: Z/VM 7.4 TCPIP: FEATURE PACK - FEATURE 03 FIX 00

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• The CERTMGR Enhancements provide expanded certificate management
  capabilities in z/VM, including stash file enhancements.
  The use of stash files in GSKKYMAN are enhanced to eliminate
  repeated password entry and enable easier automation. New
  functions such as receiving and renewing certificates have been
  added to the GSKKYMAN interface, while CERTMGR itself now
  supports receiving, renewing, importing, and exporting
  certificates. These improvements primarily benefit system
  administrators and security teams, as they simplify usage,
  reduce manual effort, and streamline the overall certificate
  management process.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All z/VM users                               *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION: APPLY PTF                                    *
  ****************************************************************
  The objective of CERTMGR Command Enhancements is
  following -
  1. Porting of z/OS System SSL 3.1 support into
  z/VM System SSL 3.1
  Under this section we are importing all the z/OS system SSL
  support in which GSKKYMAN use stash file instead of requiring
  the password and having to enter the password for each
  invocation to easily automate the certificate management
  process.
  2. Implement new functions on the z/VM GSKKYMAN command line
  interface
  a.'Receive' - receive certificate using GSKKYMAN command line
  interface
  b.'Renew' - generate certificate renewal request using GSKKYMAN
  command line interface
  3. Add new functionality on the CERTMGR command
  a. Receive a certificate
  b. Create a certificate renewal request
  c. Import a Certificate
  d. Export a Certificate
  

Problem conclusion

Temporary fix

Comments

• To read more about these CERTMGR enhancements, refer to the
  1. z/VM: TCP/IP Planning and Customization (SC24-6331-74)
  2. z/VM: TCP/IP User's Guide (SC24-6333-74)
  3. z/VM: TCP/IP Messages and Code (GC24-6330-74)
  4. z/VM: General Information (GC24-6286-74)
  5. z/VM: Migration Guide (GC24-6294-74)
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UO07642

Modules/Macros

• CERTMGR  DTCUME   DTCUMEB  GSKCMS31 GSKC31   GSKC31F  GSKKYMAN
  GSKMSGA  GSKMSGS  GSKSSL   GSKSUS31 GSKS31   GSKS31F  GSKTRACE
  LDPCBSD  LDPCCLD  LDPCSRV  LDPCUTS  LDPICRAN LDPIFPTS LDPIRACS
  LDPIRDV  LDPISNPR LDPIWRTV LDPNCHKL LDPNSMSG LDPXBINT SSLADMIO
  SSLADMNP SSLCACHE SSLCIPHS SSLCTLIO SSLDPUMP SSLDSPTC SSLGSKCF
  SSLMNTOR SSLPARGS SSLREPRT SSLSCBEX SSLSTART SSLTOOLS SSLTRACE
  SSLTRSIT SSLXBINT TCVMVER  7VMTCP40
  

Fix information

• Fixed component name

  TCP/IP FOR Z/VM

• Fixed component ID

  5735FAL00

Applicable component levels

• R740 PSY UO07642

     UP26/05/05 I 1000

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.