CA ACF CA RS 1605 Service List

Transcription

1 CA ACF CA RS 1605 Service List Description Type 16.0 RO86948 MESSAGE ACF79410 MISSING IN R16 PTF RO87169 ACF2/IMS SUPPORT FOR IMS R14 PTF RO87944 WRONG ERROR MSG ON P11TOKEN WHEN ICSF IS DOWN PTF RO88106 ACFRPTPP CREATES INVALID ACFFLT FOR RV RESOURCE RECORD PTF RO88324 ACFESAGE 0530 RECORD BAD FOR DB2 RULES WITH LOTS OF SERVICES PTF RO88654 ADD INTERNAL REFRESH STATUS FLAG PTF RO88719 HFS SYSTEM FUNCTIONS NOT LOGGED IN SAFHFSEC PTF RO88971 ABEND SDC4-529 IN ACF04RSD ON R16 WITH PRE 2.1 Z/OS *HIP/PRP* RO89222 CICS: ACFM CP UNABLE TO CHANGE LID RETIRE W/MINI-LIDS PTF RO89274 ORPHANED SUBPOOL 0 STORAGE AFTER NEWXREF PTF RO89360 CA MFA RELEASE 2 SUPPORT PTF RO89396 CICS: TEMPSTRG NOT DISABLED W/C-CIC PARM NOVALIDATE PTF RO89397 CICS: FORMAT=ACF2 MRO INHERIT SIGNONS FAIL W/ACF01200 PTF RO89442 S0C4 IN SAFOESMF LOGGING R_AUDIT MOUNT EVENT PTF RO89602 CICS: MSG DFHSN1108 SAF RC08 ESM RC24 PTF RO89603 CICS: MSG DFHSN1108 SAF RC08 ESM RC24 PTF RO89649 CICS: DO NOT ENFORCE ACF2 NEW PASSWORD SPECS WITH MAA ACTIVE PTF The CA RS 1605 service count for this release is 17

2 CA ACF2 2 CA RS 1605 Service List for CAX1G00 FMID Service Description Type CAX1G00 RO86948 MESSAGE ACF79410 MISSING IN R16 PTF RO87944 WRONG ERROR MSG ON P11TOKEN WHEN ICSF IS DOWN PTF RO88106 ACFRPTPP CREATES INVALID ACFFLT FOR RV RESOURCE RECORD PTF RO88324 ACFESAGE 0530 RECORD BAD FOR DB2 RULES WITH LOTS OF SERVICES PTF RO88654 ADD INTERNAL REFRESH STATUS FLAG PTF RO88719 HFS SYSTEM FUNCTIONS NOT LOGGED IN SAFHFSEC PTF RO88971 ABEND SDC4-529 IN ACF04RSD ON R16 WITH PRE 2.1 Z/OS *HIP/PRP* RO89222 CICS: ACFM CP UNABLE TO CHANGE LID RETIRE W/MINI-LIDS PTF RO89274 ORPHANED SUBPOOL 0 STORAGE AFTER NEWXREF PTF RO89360 CA MFA RELEASE 2 SUPPORT PTF RO89397 CICS: FORMAT=ACF2 MRO INHERIT SIGNONS FAIL W/ACF01200 PTF RO89442 S0C4 IN SAFOESMF LOGGING R_AUDIT MOUNT EVENT PTF RO89602 CICS: MSG DFHSN1108 SAF RC08 ESM RC24 PTF The CA RS 1605 service count for this FMID is 13

3 CA ACF2 3 CA RS 1605 Service List for CAX1G03 FMID Service Description Type CAX1G03 RO89396 CICS: TEMPSTRG NOT DISABLED W/C-CIC PARM NOVALIDATE PTF RO89603 CICS: MSG DFHSN1108 SAF RC08 ESM RC24 PTF RO89649 CICS: DO NOT ENFORCE ACF2 NEW PASSWORD SPECS WITH MAA ACTIVE PTF The CA RS 1605 service count for this FMID is 3

4 CA ACF2 4 CA RS 1605 Service List for CAX1G04 FMID Service Description Type CAX1G04 RO87169 ACF2/IMS SUPPORT FOR IMS R14 PTF The CA RS 1605 service count for this FMID is 1

5 CA ACF CA RS PTF RO RO86948 RO86948 M.C.S. ENTRIES = ++PTF (RO86948) MESSAGE ACF79410 MISSING IN R16 Code added by ACF2MS problem 9513 to add support for a new GSO RULEOPTS VAMFAIL/NOVSAMFAIL also added a new message to warn sites that they have the NOVSAMFAIL set. This support was sourced into the r16 release of ACF2 but is missing the ACF79410 warning message. The following message has been omitted from r16. ACF WARNING: GSO RULEOPTS NOVSAMFAIL WARN MODE IN EFFECT None. The support for the option is in place. It is just the message letting a site know they are running with the NOVSAMFAIL option. None CA-ACF2-MVS Version 16.0 ACF2MS 9844 Copyright (C) 2016 CA. All rights reserved. R00114-ACF160-SP1 DESC(MESSAGE ACF79410 MISSING IN R16 SUP ( TR86948 ) ++HOLD (RO86948) SYSTEM FMID(CAX1G00) REASON (DYNACT ) DATE (16110) PURPOSE Activate change without IPL KNOWLEDGE Operator commands ACCESS z/os Operator console 1. F LLA,REFRESH

6 CA ACF CA RS PTF RO RO87169 RO87169 M.C.S. ENTRIES = ++PTF (RO87169) ACF2/IMS SUPPORT FOR IMS R14 IBM has released IMS V14. The solutions for this problem provide support for IMS V14 in the CA ACF2 for z/os IMS option under ACF2. Not applicable Without this support, the ACF2 IMS interface will not function in an IMS V14 environment. Not applicable. CA-ACF2-MVS Release 15.0 Release 16.0 ACF2MS 9682 Copyright (C) 2016 CA. All rights reserved. R00117-ACF160-SP1 DESC(ACF2/IMS SUPPORT FOR IMS R14 FMID (CAX1G04) PRE ( RO84879 ) SUP ( TR87167 TR87169 )

7 CA ACF CA RS PTF RO RO87944 RO87944 M.C.S. ENTRIES = ++PTF (RO87944) WRONG ERROR MSG ON P11TOKEN WHEN ICSF IS DOWN PROBLEM DESRCRIPTION: If a P11TOKEN IMPORT subcommand is attempted with ICSF down, the ACF command issues message ACF68101 instead of message ACF Message ACF68101 is a generic error message showing the ICSF RC and RSN values whereas message ACF68102 specifically indicates that ICSF is not active. P11TOKEN IMPORT subcommand fails with the wrong message (ACF68101 ACF2 administrator is not given sufficient information to determine the cause of the P11TOKEN IMPORT error. Start ICSF. CA ACF2 for z/os Release 16.0 ACF2MS 9863 Copyright (C) 2016 CA. All rights reserved. R00123-ACF160-SP1 DESC(WRONG ERROR MSG ON P11TOKEN WHEN ICSF IS DOWN SUP ( TR87944 ) ++HOLD (RO87944) SYSTEM FMID(CAX1G00) REASON (DYNACT ) DATE (16116) PURPOSE Activate change without IPL KNOWLEDGE Operator commands ACCESS z/os Operator console 1. LLA Refresh 2. Execute console command 'F ACF2,NEWMOD(SAFCRCSF)'

8 CA ACF CA RS PTF RO RO88106 RO88106 M.C.S. ENTRIES = ++PTF (RO88106) ACFRPTPP CREATES INVALID ACFFLT FOR RV RESOURCE RECORD The ACFRPTPP report is creating an invalid flat file for the resource records. This is what the flat file looks like at r15 offset UPDTRULE DIRECTRY001 LOGRMQQWARNRPXX This is what the flat file looks like at r16 offset RULE PST-VALD Impact: Cannot use the ACFFLT file for resource loggings. Circumvention. The report could be run in batch and STEPLIB to the r15 version of the ACFRPTPP report. CA-ACF2-MVS Version 16.0 ACF2MS 9867 Copyright (C) 2016 CA. All rights reserved. R00124-ACF160-SP1 DESC(ACFRPTPP CREATES INVALID ACFFLT FOR RV RESOURCE RECORD SUP ( TR88106 ) ++HOLD (RO88106) SYSTEM FMID(CAX1G00) REASON (DYNACT ) DATE (16116) PURPOSE Activate change without IPL KNOWLEDGE Operator commands ACCESS z/os Operator console 1. F LLA,REFRESH if necessary

9 CA ACF CA RS PTF RO RO88324 RO88324 M.C.S. ENTRIES = ++PTF (RO88324) ACFESAGE 0530 RECORD BAD FOR DB2 RULES WITH LOTS OF SERVICES The ACFESAGE report will create a type 0530 record for each resource rule line. As part of this record it has an area defined to hold the service keywords. This area is defined as RRLE_SERVICE and is 30 characters long. The problem is that this same record type is used for ACF2 DB2 rule lines. The services that are allowed in some of the resource types for DB2 are longer than 30 characters. The problem with this is that the code is not looking for a max length of 30 characters to move into the field. We are moving in the service keywords into the RRLE_SERVICE field no matter how long the data is and overlay the fields that follow this field. The solution to this will be to define a new field to contain the service keywords. This new field will be at the end of the type 0530 records and called RRLE_SERVICES. This is what the end of the record layout will look like. RRLE_SERVICE DS CL30 Read,Add,Delete,Update,Execute RRLE_VERIFY DS CL1 Password reverify RRLE_NEXTKEY DS CL8 Nextkey value, if present RRLE_RECCHECK DS CL32 Name of EXPRESSN record RRLE_ALLOW DS CL1 Allow (A ) RRLE_LOG DS CL1 Log (L ) RRLE_PREVENT DS CL1 Prevent (P ) RRLE_USER DS CL8 User TA9011B RRLE_DATA DS CL64 Data RRLE_SERVICES DS CL120 Resource/DB2 Services TA9874B RRLE_LEN EQU *-SAG_COMMON Length of Resource rule line As part of this update we will continue to fill in the RRLE_SRRVICE field for BASE ACF2 resource rules. So with this update the new field will always be filled in with services if present and the old field will only be filled in for base ACf2 resource rules. This way a site that does not have ACF2 DB2 can continue working as before with the output from the ACFESAGE utility. Overlay of storage within the type 0530 record for ACF2 DB2 rule lines. Unusable output from the ACFESAGE utility for ACF2 DB2 rules. None CA-ACF2-MVS Release 15.0 CA-ACF2-MVS Version 16.0 ACF2MS 9874 Copyright (C) 2016 CA. All rights reserved. R00127-ACF160-SP1 DESC(ACFESAGE 0530 RECORD BAD FOR DB2 RULES WITH LOTS OF SERVICES PRE ( RO80625 RO84877 ) SUP ( TR78875 TR78890 TR88324 ) ++HOLD (RO88324) SYSTEM FMID(CAX1G00) REASON (DYNACT ) DATE (16116) PURPOSE Activate change without IPL

10 CA ACF CA RS PTF RO88324 KNOWLEDGE Operator commands ACCESS z/os Operator console 1. F LLA,REFRESH if required

11 CA ACF CA RS PTF RO RO88654 RO88654 M.C.S. ENTRIES = ++PTF (RO88654) ADD INTERNAL REFRESH STATUS FLAG This apar will add a new flag to the ACCVT to indicate that a REFRESH of the EXITS records is in progress. The new flag is ACCREFEX in the ACCFLG10 byte. This will be set during the refresh of the exits record due to either a REFRESH(EXITS) or REFRESH(ALL The flag will only be set while the process is ongoing. There will also be a 2 second stimer added during this refresh to allow any in flight processes to finish prior to updating the active exits in the ACCVT. Incorrect 'Stored By' userid and time stamp in ACF2 rules. This has only occurred with product ETF/A in the system Cannot determine who or when a rule was stored. None CA-ACF2-MVS Release 15.0 CA-ACF2-MVS Version 16.0 ACF2MS 9878 Copyright (C) 2016 CA. All rights reserved. R00129-ACF160-SP1 DESC(ADD INTERNAL REFRESH STATUS FLAG PRE ( RO80625 RO84877 ) SUP ( TR88654 ) ++HOLD (RO88654) SYSTEM FMID(CAX1G00) REASON (DYNACT ) DATE (16098) PURPOSE Activate change without IPL KNOWLEDGE Operator commands ACCESS z/os Operator console 1. LLA Refresh

12 CA ACF CA RS PTF RO RO88719 RO88719 M.C.S. ENTRIES = ++PTF (RO88719) HFS SYSTEM FUNCTIONS NOT LOGGED IN SAFHFSEC With HFSSEC enabled, RACROUTE resource checks made to validate system functions (such as chown and chmod) are not logged. These resources are in the FACILITY class with entity names starting with BPX.CAHFS, such as BPX.CAHFS.CHANGE.FILE.MODE which is checked when the chown command is issued. RACROUTE calls that check BPX.CAHFS resources are not logged when the applicable resource rule specifies LOG. Auditing of chown, chmod and other HFS system functions is not possible using commonly practiced security administrator procedures. Consider setting a SECTRACE with REQSTOR=SAFHFSEC. CA-ACF2-MVS Release 15.0 CA-ACF2-MVS Release 16.0 ACF2MS 9849 Copyright (C) 2016 CA. All rights reserved. R00133-ACF160-SP1 DESC(HFS SYSTEM FUNCTIONS NOT LOGGED IN SAFHFSEC PRE ( RO88717 ) SUP ( TR87200 TR88711 TR88719 ) ++HOLD (RO88719) SYSTEM FMID(CAX1G00) REASON (DYNACT ) DATE (16116) PURPOSE Activate change without IPL USERS Sites with CA SAF HFS security enabled KNOWLEDGE Operator commands ACCESS z/os Operator console 1. LLA Refresh 2. Execute console command 'F ACF2,NEWMOD(SAFHFSEC)'

13 CA ACF CA RS PTF RO RO88971 RO88971 M.C.S. ENTRIES = ++PTF (RO88971) ABEND SDC4-529 IN ACF04RSD ON R16 WITH PRE 2.1 Z/OS Abend SDC4-529 trying to get 64-bit storage for a resource rule directory. The abend occurs when R16 of ACF2 is running on a pre z/os 2.1 system and the resource rule directory we are trying to get storage for is between 64k and 128k in size. We are attempting to use the IARST64 macro to get storage for smaller directories. In 1.13 and below it allows 64k and above that it allows 128k. CCSR010E ACF04RSD SDC4 at 01B0F116 LMOD N/A CSECT N/A +N/A ACF2 N/A ACF2 Cannot build this resource directory. None CA-ACF2-MVS Version 16.0 ACF2MS 9880 Copyright (C) 2016 CA. All rights reserved. R00134-ACF160-SP1 DESC(ABEND SDC4-529 IN ACF04RSD ON R16 WITH PRE 2.1 Z/OS PRE ( RO80085 RO80628 ) SUP ( DC87799 RO82584 TR82584 TR88971 ) ++HOLD (RO88971) SYSTEM FMID(CAX1G00) REASON (DYNACT ) DATE (16116) PURPOSE Activate change without IPL KNOWLEDGE Operator commands ACCESS z/os Operator console 1. F LLA,REFRESH 2. F ACF2,NEWMOD(ACF00SVA)

14 CA ACF CA RS PTF RO RO89222 RO89222 M.C.S. ENTRIES = ++PTF (RO89222) CICS: ACFM CP UNABLE TO CHANGE LID RETIRE W/MINI-LIDS The attributes required to add and remove the RETIRE attribute from a LOGONID are not carried in the Mini-LOGONID record. Hence, CICS and other MUSASS applications using Mini-LIDS will not provide users with the proper authority to maintain these fields. The ultimate change required is to modify the local ACFFDR such that ACF2 specification maps LIDM5FLG to MLAAVL02. The sysmod for this problem will modify the distributed ACFFDR objects but local installation versions must be modified according to client installation standards. ACF00103 NOT AUTHORIZED TO CHANGE FIELD RETIRE Unable to maintain RETIRE attribute under CICS None ACF2MS 9888 Copyright (C) 2016 CA. All rights reserved. R00141-ACF160-SP1 DESC(CICS: ACFM CP UNABLE TO CHANGE LID RETIRE W/MINI-LIDS PRE ( RO84877 ) SUP ( TR89222 ) ++HOLD (RO89222) SYSTEM FMID(CAX1G00) REASON (DYNACT ) DATE (16113) PURPOSE Enable updated code KNOWLEDGE Linklist contents (optional) REQUIRED Console commands ACCESS Master console 1. Perform an LLA REFRESH (if applicable) 2. Issue console command: F ACF2,NEWMOD(ACFFDR) 3. Recycle CICS and any other MUSASS jobs using Mini-LIDS

15 CA ACF CA RS PTF RO RO89274 RO89274 M.C.S. ENTRIES = ++PTF (RO89274) ORPHANED SUBPOOL 0 STORAGE AFTER NEWXREF Each NEWXREF command fails to FREEMAIN a block of subpool 0 key 1 storage in the ACF2 address space. The blocks have length x'1330' and an eyecatcher of XROL, XSGP, or XRGP. Increase in storage utilization in subpool 0 after NEWXREF command The address space may fail with an out of storage condition. Do not issue NEWXREF commands CA ACF2 FOR Z/OS Release 15.0 CA ACF2 FOR Z/OS Release 16.0 ACF2MS 9889 Copyright (C) 2016 CA. All rights reserved. R00143-ACF160-SP1 DESC(ORPHANED SUBPOOL 0 STORAGE AFTER NEWXREF SUP ( TR89274 ) ++HOLD (RO89274) SYSTEM FMID(CAX1G00) REASON (IPL ) DATE (16117) PURPOSE Activate change KNOWLEDGE Operator commands ACCESS z/os Operator console 1. SMP APPLY the fix. 2. Perform an IPL.

16 CA ACF CA RS PTF RO RO89360 RO89360 M.C.S. ENTRIES = ++PTF (RO89360) CA MFA RELEASE 2 SUPPORT ENHANCEMENT DESCRIPTION: CA Mainframe Advanced Authentication for RSA SecurID support CA-ACF2-MVS Release 16.0 CA-ACF2-MVS Release 15.0 ACF2MS 9871 Copyright (C) 2016 CA. All rights reserved. R00146-ACF160-SP1 DESC(CA MFA RELEASE 2 SUPPORT PRE ( RO80625 RO84877 RO84952 ) SUP ( TR89243 TR89360 ) ++HOLD (RO89360) SYSTEM FMID(CAX1G00) REASON (IPL ) DATE (16105) PURPOSE Activate change KNOWLEDGE Operator commands ACCESS z/os Operator console 1. IPL CLPA

17 CA ACF CA RS PTF RO RO89396 RO89396 M.C.S. ENTRIES = ++PTF (RO89396) CICS: TEMPSTRG NOT DISABLED W/C-CIC PARM NOVALIDATE When administering ACF2 CICS Parameters via the C-CIC Infostorage Database records, if a CICSKEY.TEMPSTRG record exists, the intercept specifically required only for RESOURCE=TEMPSTRG is activated even when NOVALIDATE is specified. The ACFM transaction OM Function correctly displays OPTION = DISABLED, but the intercept is still requested from ENF CICS. This error is considered a performance factor only. None. Could have slight negative effect on performance. Do not use the CICSKEY.TEMPSTRG C-CIC Infostorage Database record. ACF2MS 9836 Copyright (C) 2016 CA. All rights reserved. R00148-ACF160-SP1 DESC(CICS: TEMPSTRG NOT DISABLED W/C-CIC PARM NOVALIDATE FMID (CAX1G03) SUP ( TR89396 ) ++HOLD (RO89396) SYSTEM FMID(CAX1G03) REASON (DYNACT ) DATE (16116) CA-ACF2-MVS CICS Version 16.0 PURPOSE Enable updated code KNOWLEDGE REQUIRED Console commands ACCESS Master console 1. Recycle the CICS TS region.

18 CA ACF CA RS PTF RO RO89397 RO89397 M.C.S. ENTRIES = ++PTF (RO89397) CICS: FORMAT=ACF2 MRO INHERIT SIGNONS FAIL W/ACF01200 If validation of the IEAABD.DMPAUTH resource in a CICS region is done under the z/os Dump Task TCB, a portion of the ACF2 CICS interface required to process MRO FORMAT=ACF2 signons may be disabled, resulting in ATTACHSEC=IDENTIFY signons failing with message ACF This has been observed after SYMDUMP-produced dumps associated with CICS storage violations. ATTACHSEC=IDENTIFY signons fail with message ACF Some remote transactions may fail. Specify MRO FORMAT=CICS to ACF2 CICS via ACFM OM M ACF2MS 9858 Copyright (C) 2016 CA. All rights reserved. R00149-ACF160-SP1 DESC(CICS: FORMAT=ACF2 MRO INHERIT SIGNONS FAIL W/ACF01200 SUP ( TR89397 ) ++HOLD (RO89397) SYSTEM FMID(CAX1G00) REASON (DYNACT ) DATE (16116) PURPOSE Enable updated code KNOWLEDGE Console commands ACCESS Master console 1. Perform an LLA REFRESH 2. Issue console command: F ACF2,NEWMOD(ACF00SVA)

19 CA ACF CA RS PTF RO RO89442 RO89442 M.C.S. ENTRIES = ++PTF (RO89442) S0C4 IN SAFOESMF LOGGING R_AUDIT MOUNT EVENT SAFOESMF may take an 0C4 ABEND when cutting an SMF record for an R_audit call to audit a mount. The problem occurs when moving the mount pathname into the ACFRPTOM SMF record. The storage containing the pathname is in a dataspace but SAFOESMF processing is not running in access register mode when it attempts to reference the storage. This fix also corrects a problem in SAFOEAUD recovery processing. Following the 0C4 in SAFOESMF the SAFOEAUD recovery processing took an 0C3 due to a problem restoring registers in the recovery routine. CCSR010E SAFOEAUD S0C4 at xxxxxxxx LMOD SAFOEDRV CSECT SAFOESMF CCSR010E SAFOEAUD S0C3 at xxxxxxxx LMOD SAFOEDRV CSECT SAFOEAUD The R_audit event SMF record is not cut None CA-ACF2-MVS CA-ACF2-MVS Release 15.0 CA-ACF2-MVS Version 16.0 ACF2MS 9893 Copyright (C) 2016 CA. All rights reserved. R00150-ACF160-SP1 DESC(S0C4 IN SAFOESMF LOGGING R_AUDIT MOUNT EVENT PRE ( RO84559 RO87013 RO88717 ) SUP ( TR89442 ) ++HOLD (RO89442) SYSTEM FMID(CAX1G00) REASON (DYNACT ) DATE (16119) PURPOSE Activate change without IPL KNOWLEDGE Operator commands ACCESS z/os Operator console 1. LLA Refresh 2. Execute console command 'F ACF2,NEWMOD(SAFOEDRV)'

20 CA ACF CA RS PTF RO RO89602 RO89602 M.C.S. ENTRIES = ++PTF (RO89602) CICS: MSG DFHSN1108 SAF RC08 ESM RC24 With use of R15 RO81207 (ACF2 BASE) and RO81208 (ACF2 CICS) or Beta R16 RO85868 (ACF2 CICS), Failed CICS Signon processing that occurs with the ACF2 CICS interface active may cause CICS to issue the error messages below because it does not recognize the SAF RC8 ESM RC24 combination. To the CICS CSCS log: DHFSN1108 <date> <time> <jobname> Signon at netname tttt by user uuuuuuuu has failed. SAF codes are (X' ',X' ' ESM codes are (X' ',X' ' If using program DFHSNP with the CESN transaction: DFHCE3541 Security interface error ( Sign-on is terminated. is displayed on the terminal. Superfluous messages are issued, but there may be many. None. CA-ACF2-MVS Release 15.0 CA-ACF2-MVS Version 16.0 ACF2MS 9848 Copyright (C) 2016 CA. All rights reserved. R00152-ACF160-SP1 DESC(CICS: MSG DFHSN1108 SAF RC08 ESM RC24 PRE ( RO80625 RO84877 RO84952 ) SUP ( AC87799 RO87685 TR87685 TR89602 ) ++IF FMID(CAX1G03) REQ(RO89603 ). ++HOLD (RO89602) SYSTEM FMID(CAX1G00) REASON (DYNACT ) DATE (16112) PURPOSE Make new code available KNOWLEDGE REQUIRED Console commands ACCESS Master console REQUIRED CICS Region ACFE Transaction 1. Perform an LLA REFRESH 2. Issue console command: F ACF2,NEWMOD(ACF9C000) 3. Issue CICS transaction: ACFE=NEWC=CAKSSIGN

21 CA ACF CA RS PTF RO RO89603 RO89603 M.C.S. ENTRIES = ++PTF (RO89603) CICS: MSG DFHSN1108 SAF RC08 ESM RC24 With use of R15 RO81207 (ACF2 BASE) and RO81208 (ACF2 CICS) or Beta R16 RO85868 (ACF2 CICS), Failed CICS Signon processing that occurs with the ACF2 CICS interface active may cause CICS to issue the error messages below because it does not recognize the SAF RC8 ESM RC24 combination. To the CICS CSCS log: DHFSN1108 <date> <time> <jobname> Signon at netname tttt by user uuuuuuuu has failed. SAF codes are (X' ',X' ' ESM codes are (X' ',X' ' If using program DFHSNP with the CESN transaction: DFHCE3541 Security interface error ( Sign-on is terminated. is displayed on the terminal. Superfluous messages are issued, but there may be many. None. CA-ACF2-MVS Release 15.0 CA-ACF2-MVS Version 16.0 ACF2MS 9848 Copyright (C) 2016 CA. All rights reserved. R00152-ACF160-SP1 DESC(CICS: MSG DFHSN1108 SAF RC08 ESM RC24 FMID (CAX1G03) PRE ( RO85868 ) SUP ( TR89603 ) ++IF FMID(CAX1G00) REQ(RO89602 ). ++HOLD (RO89603) SYSTEM FMID(CAX1G03) REASON (DYNACT ) DATE (16112) CA-ACF2-MVS CICS Version 16.0 PURPOSE Make new code available KNOWLEDGE REQUIRED Console commands ACCESS Master console REQUIRED CICS Region ACFE Transaction 1. Perform an LLA REFRESH 2. Issue console command: F ACF2,NEWMOD(ACF9C000) 3. Issue CICS transaction: ACFE=NEWC=CAKSSIGN

22 CA ACF CA RS PTF RO RO89649 RO89649 M.C.S. ENTRIES = ++PTF (RO89649) CICS: DO NOT ENFORCE ACF2 NEW PASSWORD SPECS WITH MAA ACTIVE ACF2 CICS enforces the minimum new password length and issues message ACFAE155 if it is not met. The new password area may be used to pass an MAA token which may not satisfy this criteria, so if MAA is active leave this edit to later SVCA processing. Message ACFAE155 when attempting CICS Signon with an MAA token. Unable to Signon with an MAA token. Alter ACF2 MVS Min password length. ACF2MS 9869 Copyright (C) 2016 CA. All rights reserved. R00153-ACF160-SP1 DESC(CICS: DO NOT ENFORCE ACF2 NEW PASSWORD SPECS WITH MAA ACTIVE FMID (CAX1G03) PRE ( RO80671 RO80706 RO84878 RO85868 ) SUP ( TR89649 ) ++HOLD (RO89649) SYSTEM FMID(CAX1G03) REASON (DYNACT ) DATE (16116) CA-ACF2-MVS CICS Version 16.0 PURPOSE Enable updated code KNOWLEDGE Linklist contents (optional) REQUIRED Console commands ACCESS Master console (optional) REQUIRED CICS Region 1. Perform an LLA REFRESH (if applicable) 2. Recycle the CICS TS region.