![]() | ![]() | ![]() | ![]() | ![]() |
Advanced Encryption Standard (AES) encryption under z/OS requires IBM Integrated Cryptographic Service Facility (ICSF) and PKA callable services to be enabled.
The ICSFSTAT internal call reports PKA callable services as enabled only after the Data Encryption Standard (DES) master key is loaded and valid. ICSFSTAT does not report PKA callable services as enabled when only the AES master key is loaded and valid. ICSFST2 element 3 reports PKA callable services as enabled when the DES and/or AES master key are loaded and valid.
Support for ICSFST2 calls was added in addition to ICSFSTAT calls.
Click the Hot Fix tab in this note to access the hot fix for this issue.
Product Family | Product | System | Product Release | SAS Release | ||
Reported | Fixed* | Reported | Fixed* | |||
SAS System | SAS/SECURE | z/OS | 9.4_M6 | 9.41_M5 | 9.4 TS1M6 | 9.4 TS1M8 |
z/OS 64-bit | 9.4_M6 | 9.41_M5 | 9.4 TS1M6 | 9.4 TS1M8 |