PH72675: JAVA CRYPTOGRAPHIC PROVIDERS MAY HANG OR FAIL IF CPACF IS NOT ENABLED ON THE SYSTEM.

APAR status

• Closed as program error.

Error description

• Error Message: N/A
  .
  Stack Trace: N/A
  .
  Symptoms vary depending on product being used, such as
  "com.ibm.crypto.plus.provider.icc.ICCException: ICC_Attach
  failed" message from IBMJCEPlus or z/OSMF failing to accept REST
  calls and z/OSMF hanging.
  

Local fix

Problem summary

• Java cryptographic providers are unable to operate correctly due
  
  to the lack of an entropy source on machines that do not have
  CPACF enabled.
  

Problem conclusion

• The ICC cryptographic engine used by IBMJCEPlus and OpenJCEPlus
  was updated to generate entropy in software to allow these
  providers to operate without a system entropy source.
  .
  This APAR will be fixed in the following Releases:
  .
  IBM Semeru Runtimes
    25              25.0.4.0
    21              21.0.12.0
    17              17.0.20.0
    11              11.0.32.0
  IBM SDK, Java Technology Edition
    8    SR8 FP70  (8.0.8.70)
  .
  Downloads and supplementary documentation can be found at the
  following locations:
  - For the z/OS operating system:
   - Java SDK Products on z/OS
     https://www.ibm.com/support/pages/java-sdk-products-zos
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA Z/OS 64

• Fixed component ID

  620700104

Applicable component levels