PH56456: CWWKG0102I FOUND CONFLICTING SETTINGS FOR DEFAULTKEYSTORE INSTANCE OF KEYSTORE CONFIGURATION. 23/11/15 PTF PECHANGE

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The client was attempting to configure their WUI CMCI JVM
  and had added the following to their server.xml in order to
  stop safkeyringhw being changed to safkeyring and JCECCARACFKS
  to JCERACFK on WUI startup:
  
  <keyStore fileBased="false" id="dummy" location=
  "safkeyring:///*******" password="password" readOnly="true"
  type="JCERACFKS"/>
  <keyStore fileBased="false" id="defaultKeyStore" location=
  "safkeyringhw:///***********" password="password" readOnly
  ="true" type="JCECCARACFKS"/>
  
  This worked as expected but after applying maintenance they
  experienced the following
  
  CWWKG0102I: Found conflicting settings for defaultKeyStore
  instance of keyStore configuration.    Property location
  has conflicting values:
  
  Property type has conflicting values:
     Value JCECCARACFKS is set in file:/u/xxxx/cics/******
     /servers/defaultServer/server.xml.
     Value JCERACFKS is set in file:/u/xxxx/cics/******
     /servers/defaultServer/server.xml.
  Property type will be set to JCERACFKS.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICS users with UI83850, UI92240,        *
  *                 UI83849, UI91768, UI91769, or UI92241.       *
  ****************************************************************
  * PROBLEM DESCRIPTION: keyStore element in CMCI JVM server's   *
  *                      server.xml is always deleted and        *
  *                      re-written on enable, with the CICS     *
  *                      default keyStore based on assigned      *
  *                      SIT parameters.                         *
  ****************************************************************
  When a CMCI JVM server (EYUCMCIJ) is enabled the keyStore
  element within its server.xml is deleted and then re-written
  with the CICS default keyStore element, with its attributes
  based on relevant SIT parameters. This results in any manual
  custom configuration being overwritten when the CMCI JVM server
  is enabled.
  
  Where more than one keyStore element exists this issue may be
  observed by receiving a CWWKG0102I, as after three enabling
  cycles there will be more than one element with id
  "defaultKeyStore".
  
  When specifying a KEYRING system initialization parameter in the
  new formats provided by APARs PH49253 and PH49261, the parameter
  cannot be correctly applied to the server.xml for EYUCMCIJ.
  

Problem conclusion

• UI83850 UI92240 UI83849 UI91768 UI91769 UI92241
  
  CICS has been changed to add two new properties that can be set
  in the jvmprofile:
  com.ibm.cics.jvmserver.wlp.server.keystore.location
  com.ibm.cics.jvmserver.wlp.server.keystore.type
  
  These properties are assigned as -D values within the jvmprofile
  and allow the location and type fields within the keyStore
  element to be assigned in the JVM server's server.xml.
  
  Where these values are not assigned, any existing keyStore
  element will no longer be overwritten.
  
  The sample JVM Profiles have been updated with usage
  instructions.
  
  This APAR also enables the changes made by PH49253 and PH49261
  to work in a EYUCMCIJ JVM server.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PH55288

• APAR is sysrouted TO one or more of the following:

  UI94468 UI94469

Modules/Macros

• DFHAPJVM DFHAXIS2 DFHCDJNI DFHMKDIR DFHSJCLS DFHSJPP  DFHSJSC
  DFHSJT8  DFHWLP   DFHZFSSH DFJ@H176 DFJ@H182 DFJ@H186 DFJ@H187
  DFJ@H236 DFJ@H237 DFJ@H238 DFJ@H350 DFJ@H353 DFJ@H356 DFJ@H360
  DFJ@H390 DFJ@H395 DFJ@H396 DFJ@H427 DFJ@H453 DFJ@H454 DFJ@H455
  DFJ@H456 DFJ@H457 DFJ@H467 DFJ@H468 DFJ@H473 DFJ@H477 DFJ@H480
  DFJ@H484 DFJ@H492 DFJ@H571 DFJ@H586 DFJ@H602 DFJ@H603 DFJ@H604
  DFJ@H985 DFJ@H986 DFJ@H987 DFJ@H988 DFJ@H989 DFJ@H990 DFJ@H991
  DFJ@H992 DFJ@H993 DFJ@H994 DFJ@H995 DFJ@H996 DFJDTCOE DFJOUTRE
  DFJWLPBP DFJWLPPL EYUCMCIJ EYUSMSSJ
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R200 PSY UI94469

     UP23/11/18 P F311 {

• R300 PSY UI94468

     UP23/11/21 P F311 {

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.