PI56940: CONFIG ASSISTANT NO LONGER ACCEPTS * IN AT-TLS TRAFFIC DESCRIPTOR KEYRING NAME.

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• This problem was noticed after applying PTFs for APARs
  PI49781 and PI49785.
  When configuring an AT_TLS traffic descriptor the Configuration
  Assistant will no longer accept a keyring name containing
  an asterisk * other than at the end of the Key ring name field.
  One or multiple asterisk should be allowed throughout the Key
  ring name.
  
  For example in Congiguration Assistant when selecting:
  Configuration Assistant->AT-TLS->Traffic Descriptors
  Tab->Actions->New->Actions->New->KeyRing Tab->Use a Simple name,
  and entering a Key ring name that contains an asterisk * in any
  position other than at the end of the key ring name will result
  in the following error message.
  
  The input value is not allowed.Only alphanumeric and any of the
  following characters are allowed:
   < ( ' + | & ! $ * ) - / % _ > ? # ` ; : @ " [ ] \ { } ~ . , =
  Blank spaces are not allowed.
  

Local fix

• The configuration file can be modified outside of Configuration
  Assistant (in z/OS) to use an asterisk or multiple asterisks in
  the Key ring name.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users of V2R1 and V2R2 IBM z/OS Management Facility for  *
  * HSMA21A and HSMA22A Configuration Assistant who applied      *
  * ++PTF UI32468 or ++PTF UI32473                               *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * Does not allow the * character more than once in the keyring *
  * field for traffic descriptors in AT-TLS. Allows any number   *
  * of * for the USER ID and JOBNAME fields in AT-TLS            *
  * connectivity rules. They should be restricted to a single *  *
  * as their final character, if used.                           *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply PTF                                                    *
  ****************************************************************
  None
  

Problem conclusion

• Configurtion Assistant has been fixed to allow the * character
  more than oncein the keyring field for traffic descriptors in
  AT-TLS. It has also been fixed to restrict USER ID and JOBNAME
  fields in AT-TLS connectivity rules to a single * as their final
  character, if used.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI35848 UI35853 UI35854 UI35872

Modules/Macros

• IZUCAWFT IZUCATAR IZUCAWFU IZUCAPAX IZUCAHLP IZUCAUPX
  

Fix information

• Fixed component name

  Z/MF CONFIG ASS

• Fixed component ID

  5655S28CA

Applicable component levels

• R21A PSY UI35848

     UP16/03/30 P F603

• R22A PSY UI35872

     UP16/03/30 P F603

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.