Here's the description of the new DIAGxx parameter in the z/OS 1.8 Init & Tuning Reference:
| VSM ALLOWUSERKEYCSA(YES|NO) | NO prevents user key CSA from being allocated by failing any | attempt to obtain user key from a CSA subpool (through GETMAIN or | STORAGE OBTAIN) with a B04-5C, B0A-5C, or B78-5C abend. The | default is YES, but IBM suggests that you specify NO to prevent | user key CSA from being obtained. User key CSA creates a security | risk because any unauthorized program can modify it. IBM plans to | change the default to NO in a future release of z/OS. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html

