OA66458: NEW FUNCTION - SUPPORT FOR STRONGER ENCRYPTION FOR RACF DATA ENCRYPTED WITH KEYSMSTR CLASS PROFILES

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• NEW FUNCTION
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: RACF installations which use the KEYSMSTR    *
  *                 class.                                       *
  ****************************************************************
  * PROBLEM DESCRIPTION: RACF uses KEYSMSTR class profiles to    *
  *                      identify keys used to encrypt other     *
  *                      data in RACF such as LDAPBIND           *
  *                      passwords. KEYSMSTR class profiles do   *
  *                      not support the AES encryption          *
  *                      algorithm.                              *
  ****************************************************************
  The RACF support for KEYSMSTR class profiles is enhanced to
  enable use of the AES encryption algorithm.
  

Problem conclusion

Temporary fix

Comments

• ---------------------------------------------------------------
  The following publications have been updated:
  SA232289xx z/OS Security Server RACF Security Administrator's
             Guide
  SA232292xx z/OS Security Server RACF Command Language Reference
  
  For the specific topics that are updated, see the
  'summary of changes' section for the publication.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ96618 UJ96619

Modules/Macros

• IRRCPT00 IRRCPT01 IRRLEN00 IRRRDK00
  

Fix information

• Fixed component name

  RACF

• Fixed component ID

  5752XXH00

Applicable component levels

• R7D0 PSY UJ96618

     UP25/03/27 P F503  

• R7E0 PSY UJ96619

     UP25/03/27 P F503  

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.