PH49261: CICS - SUPPORT KEYRINGS OWNED BY DIFFERENT USERIDS

APAR status

• Closed as unreproducible in next release.

Error description

• This APAR will update the KEYRING system initialization
  parameter to accept keyrings owned by other users.  This
  includes specific userids as well as the special *AUTH* and
  *SITE* users.
  
  The format will be USERID/Ring.Name
  Virtual keyrings can be used by specifying a ring name of a
  single asterisk (*).
  
  For example;
  
   USERID/ring.name
   USERID/*
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: CICS only supports the use of KEYRINGs  *
  *                      that are owned by the region userid.    *
  ****************************************************************
  CICS only supports the use of KEYRINGs that are owned by the
  region userid.  This can make management of keyrings more
  difficult when the same certificates need to be used by multiple
  CICS regions, each with their own region userid.  This also
  prevents CICS from being able to use the system virtual
  keyrings containing all the CA certificates or all the SITE
  certificates.
  

Problem conclusion

Temporary fix

Comments

• CICS has been updated to allow the KEYRING SIT parameter to
  specify the following format of values:
    *
    ring.name
    USERID/*
    USERID/ring.name
  
  This includes support for the system virtual keyrings that
  contain the set of CA certificates (*AUTH*) and the set of SITE
  certificates (*SITE*).
  
  The CICS documentation has been updated to remove references to
  the previous restriction.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PH49253

• APAR is sysrouted TO one or more of the following:

  UI91198

Modules/Macros

• DFHXSCT  DFHXSIS
  

Fix information

• Fixed component name

  CICS TS Z/OS V6

• Fixed component ID

  5655YA100

Applicable component levels