PH42274: DEFAULT DFHSIT$$ TABLE SHOWS INCORRECT MINTLSLEVEL=TLS10

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The MINTLSLEVEL system initialization parameter specified in
  DFHSIT$$ sample for CICS TS Ver.5.6 is set to TLS10. CICS TS
  Ver.5.6 docs establishes the following in this URL:
  
  https://www.ibm.com/docs/en/cics-ts/5.6?topic=summary-mintlsleve
  l
  
  ----------------------------------------------------------------
  MINTLSLEVEL
  
  MINTLSLEVEL={TLS10|TLS11|TLS12|TLS10ONLY}
  
  TLS12
  Sets the minimum level of TLS to 1.2. This is the default value.
  ----------------------------------------------------------------
  
  But in the following URL:
  
  https://www.ibm.com/docs/en/cics-ts/5.6?topic=summary-sit
  
  establishes the following:
  ----------------------------------------------------------------
  SIT
  
  SIT=xx
  If you omit this parameter, CICS loads the unsuffixed table,
  DFHSIT, which is pregenerated with all the default values. This
  default SIT (shown in The default system initialization table)
  is in CICSTS56.CICS.SDFHAUTH, and its source, named DFHSIT$$, is
  in CICSTS56.CICS.SDFHSAMP.
  ----------------------------------------------------------------
  
  The MINTLSLEVEL shows the default value is TLS12, but
  default DFHSIT$$ table shows MINTLSLEVEL=TLS10. It is a
  mismatch.
  

Local fix

• Change the MINTLSLEVEL=TLS12 in DFHSIT$$ member in
  CICSTS56.CICS.SDFHSAMP library.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: The default DFHSIT$$ table shows an     *
  *                      incorrect default value of              *
  *                      MINTLSLEVEL=TLS10. It should be set to  *
  *                      MINTLSLEVEL=TLS12.                      *
  *                                                              *
  ****************************************************************
  The default DFHSIT$$ table shows MINTLSLEVEL set equal to TLS10.
  This default value changed in CICS TS 5.5 to TLS12.
  
  Users relying on the default SIT will have the wrong value set
  for MINTLSLEVEL.
  

Problem conclusion

• DFHSIT$$ has been changed to set MINTLSLEVEL=TLS12.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI79060

Modules/Macros

• DFHSIT$$
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R300 PSY UI79060

     UP22/01/27 P F201

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.