5 Replies Latest reply on Sep 3, 2019 2:55 PM by Larry Uher

    UIM problem using z/OS RACF SITE Certificate

    Larry Uher
      Share This:

      I have BMCUIM task working fine with a keyring containing a certificate owned by ID(UIM):

      <SSL_STORE>                                                                 

      <SSL_CERTIFICATE LOCATION="R_DATALIB">UIM/MVS.UIMring</SSL_CERTIFICATE>   

      <SSL_PRIVATE_KEY LOCATION="R_DATALIB">MVS.SAMPLE.ORG</SSL_PRIVATE_KEY>

      </SSL_STORE>                                                               

      When I try to use a RACF SITE certificate (part of SITE virtual keyring), I get errors:

       

      14:18:06.472 001 Xtn.Errr CertFindCertificateInStore() SAF/RACF Buffer Reallocate Failed (SAFrc=8/RACFrc=8,RACFrsn=48/0x00000030,CL

      1604,PL=1217)       [ This is from a R_Datalilb DataGetFirst call ]

      14:18:06.472 001 Xtn.Errr CertFindCertificateInStore() SAF/RACF Access Failed (SAFrc=8/RACFrc=8,RACFrsn=28/0x0000001c,CL=4096,PL=40

      6)                                                                                                                                

      14:18:06.472 001 Xtn.Errr FindCertificate() No certificates found                                                                 

      14:18:06.472 001 Xtn.Errr LoadCertificates() Specified Certificate not found (le=0/0x00000000)                                    

      14:18:06.473 001 Xtn.Errr TCPSChannel_OpenStore() LoadCertificates Failed (rc=0)                                                  

      14:18:06.473 001 Xtn.Errr TCPSecurity_Activate() Open Key Store Failed (rc=0)                                                     

      14:18:06.473 001 Xtn.Errr TCPChannel_SetSecurity, Security Initialize Failed (rc=TCPCHANNEL_ERROR)                               

       

      User UIM has CONTROL access to facilities IRR.DIGTCERT.LISTRING and IRR.DIGTCERT.GENCERT,

      and RDATALIB class is not active.  Any ideas on why it can't use a SITE certificate ?