OA43444: CSNBSKM CSFNCSKM RC8 RSN14F RSN335 RS_8_FUNC_NOT_IMPL CCA LIC MCL 4.1.7Z

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• After applying October 2011 LIC level (CCA level 4.1.7z) to one
  coprocessor (while remaining coprocessors were at a lower LIC
  level),existing CSNBSKM jobs began failing with RC8 RSN14F
  (d'335') indicating that the function was not supported by the
  hardware.
  
  The failure is due to a change in the communication between ICSF
  and microcode at this new LIC level for this particular API
  (SKM).
  

Local fix

• There are two potential workarounds:
  
  1.  As an immediate workaround, OFFLINE the card at the 4.1.7z
  CCA card level from all systems using it, if other cards are
  present and ACTIVE at lower CCA card levels.
  
  2.  As a more permanent workaround, install the newest MCL /
  LIC level on ALL cards being used by the LPAR.
  
  ** As a general maintenance recommendation, all ACTIVE crypto
  cards being used by an LPAR should be at a consistent level **
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Applications which call Multiple Secure      *
  *                 Key Import callable service on IBM server    *
  *                 z10                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION: If the licensed internal code of the    *
  *                      cryptographic feature CEX3 on a z10     *
  *                      server is not the same on all           *
  *                      features, calls to the                  *
  *                      Multiple Secure Key Import (CSNBSKM)    *
  *                      callable service may result in a        *
  *                      return code 8 reason code 335 ('14F'x). *
  *                      The call may be routed to a CEX3 which  *
  *                      doesn't support the updated function.   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  PROBLEM SUMMARY
  ----------------------------------------------------------------
  Multiple Secure Key Import service may fail with a return code 8
  reason code 335 ('14F'x) if called on a z10 with CEX3 features
  with mixed licensed internal code.
  

Problem conclusion

• Multiple Secure Key Import service has been updated to handle a
  mix of licensed internal code on CEX3 features on a z10.
  
  D/T2097
  D/T2098
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UA71580 UA71581 UA71582

Modules/Macros

• CSFNCKTC CSFNCSKM
  

Fix information

• Fixed component name

  ICSF/MVS

• Fixed component ID

  568505101

Applicable component levels

• R7A0 PSY UA71580

     UP13/11/22 P F311

• R7A1 PSY UA71581

     UP13/11/22 P F311

• R790 PSY UA71582

     UP13/11/22 P F311

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.