PI52615: DDF SERVER PROCESSING REPEATED DSNL045I DSNLCICF ICSF CSNERNG FUNCTION FAILED WITH RETCODE='0000000C'X AND RSNCODE='00002B34'X

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• DB2DDF defect pi52615 dpi52615
  DB2 DDF server processing resulting in repeated
  DSNL045I DSNLCICF ICSF CSNERNG FUNCTION FAILED WITH
  RETCODE='0000000C'X AND RSNCODE='00002B34'X
  due to CRYPTO API's not being configured
  **************************************************************
  Additional Symptoms and Keywords:
   DSNL045I MSGDSNL045I DSNLCICF ICSF CSNERNG CSNFPKE
    RETCODE '0000000C'X 0000000C 12
    RSNCODE '00002B34'X 00002B34
  

Local fix

• no local fix or workaround
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All Distributed Data Facility (DDF) users.   *
  *                 DB2 11 for z/OS only.                        *
  ****************************************************************
  * PROBLEM DESCRIPTION: A DSNL045I DSNLCICF CSNFPKE RETCODE     *
  *                      '0000000C'X RSNCODE '00002B34'X         *
  *                      message is periodically issued when     *
  *                      ICSF is started but not fully           *
  *                      configured or not equipped with the     *
  *                      necessary crypto hardware.              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  To address the situation described by APAR PM80827, closed as a
  suggestion, DB2 11 for z/OS provides DSNL045I message
  suppression support when ICSF is started but not fully
  configured or equipped with the necessary crypto hardware.
  This condition is reflected by the situation where an ICSF
  service fails with RETCODE '0000000C'X and RSNCODE '00002B34'X.
  However, DB2 11 for z/OS users are reporting that DSNL045I
  0000000Cx 00002B34x messages are still being periodically
  issued, and typically relative to a CSNFPKE service.  The
  messages occur because the DB2 11 for z/OS solution only
  considered a failing CSNERNG service and, further, only when
  this failure occurred relative to requester processing.
  

Problem conclusion

• DB2 11 for z/OS has been changed to suppress additional
  DSNL045I messages for CSNFPKE 0000000Cx 00002B34x related
  failures and to also consider these failures relative to server
  processing.
  Users should be aware that the DSNL045I message will be issued
  once to initially acknowledge the condition.  Further
  occurrences will be suppressed but the suppression behavior is
  reset once DDF is stopped and restarted, at which point the
  message will be suppressed again if necessary.
  A DSNL046I message will be periodically issued as a reminder
  that ICSF services were requested for encrypted authentication
  to/from the remote system.  This is consistent with existing
  DB2 for z/OS behavior where a DSNL046I is periodically issued
  when ICSF services were requested but ICSF was not started.
  Regardless of the messages, access to/from the remote system
  will be allowed via weaker, perhaps even clear text, forms of
  authentication.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  PI53069 UI33800

Modules/Macros

• DSNLCICF DSNLTSEC
  

Fix information

• Fixed component name

  DB2 OS/390 & Z/

• Fixed component ID

  5740XYR00

Applicable component levels

• RB10 PSY UI33800

     UP15/12/30 P F512

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.