Rex, Check out info APAR II13276 on IbmLink as it gives plenty of hints on what to check. Dennis
-----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Pommier, Rex Sent: Friday, November 14, 2014 8:43 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: TS3584 and TS1120 encryption I don't believe so, the manuals seemed to indicate the secondary was optional. However, I went ahead and started up a secondary EKM and updated IECIOS00 to point to it. I still get the same error when running an encryption job. IECIOS00: EKM PRIMARY=172.16.128.2:3801,SECONDARY=127.0.0.1:3801 D IOS,EKM,VERIFY=ALL: IOS099I 08.34.42 EKM HOSTS 385 PRIMARY HOSTNAME=172.16.128.2:3801 SECONDARY HOSTNAME=127.0.0.1:3801 MAX CONNECTIONS = 255, PERMANENT CONNECTIONS = 008 VERIFICATION WILL COMPLETE ASYNCHRONOUSLY IOS631I PRIMARY ENCRYPTION KEY MANAGER WAS SUCCESSFULLY CONNECTED IOS631I SECONDARY ENCRYPTION KEY MANAGER WAS SUCCESSFULLY CONNECTED Job failure: IGD330I ERROR OCCURRED DURING CBRXLCS PROCESSING- NO DEVICE POOLS EXIST TO FULFILL REQUEST FOR TDSI SPECIFICATION IGD306I UNEXPECTED ERROR DURING CBRXLCS PROCESSING RETURN CODE 12 REASON CODE 49 THE MODULE THAT DETECTED THE ERROR IS IGDIDMUS SMS MODULE TRACE BACK - IDMUS IDMSU IDM00 SSIRT SYMPTOM RECORD CREATED, PROBLEM ID IS IGD01742 Thanks for the thought, though. Rex -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Mike Schwab Sent: Friday, November 14, 2014 8:17 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: TS3584 and TS1120 encryption > SECONDARY HOSTNAME=NONE I would think this has to be filled in to proceed. On Fri, Nov 14, 2014 at 8:07 AM, Pommier, Rex <rpomm...@sfgmembers.com> wrote: > Hi Ken, > > Thanks for that verification - about the key management running over the > channel. Here's my output from the D IOS command: > > From the LPAR I'm trying to encrypt on: > > D IOS,EKM,VERIFY=ALL > IOS099I 07.39.45 EKM HOSTS 504 > PRIMARY HOSTNAME=172.16.128.2:3801 > SECONDARY HOSTNAME=NONE > MAX CONNECTIONS = 255, PERMANENT CONNECTIONS = 008 VERIFICATION WILL > COMPLETE ASYNCHRONOUSLY > > IOS631I PRIMARY ENCRYPTION KEY MANAGER WAS SUCCESSFULLY CONNECTED > IOS627E SECONDARY INTERFACE WITH ENCRYPTION KEY MANAGER CANNOT BE > CONNECTED DUE TO KEY MANAGER NOT SPECIFIED > > And from the LPAR I want to get the key from (I will eventually need to > encrypt tapes here as well): > > D IOS,EKM,VERIFY=ALL > IOS099I 07.38.38 EKM HOSTS 903 > PRIMARY HOSTNAME=127.0.0.1:3801 > SECONDARY HOSTNAME=NONE > MAX CONNECTIONS = 255, PERMANENT CONNECTIONS = 008 VERIFICATION WILL > COMPLETE ASYNCHRONOUSLY > > IOS631I PRIMARY ENCRYPTION KEY MANAGER WAS SUCCESSFULLY CONNECTED > IOS627E SECONDARY INTERFACE WITH ENCRYPTION KEY MANAGER CANNOT BE > CONNECTED DUE TO KEY MANAGER NOT SPECIFIED > > > > So it appears that EKM is up and communicating. I'm beating my head against > the wall on this one. It looks like I have all the puzzle pieces in place > but I can't get it to work. > > Rex > > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On Behalf Of Ken Smith > Sent: Thursday, November 13, 2014 5:02 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: TS3584 and TS1120 encryption > > You don't need network connectivity between the drives/library and the key > servers running on z/OS. Communication occurs over the channel. You can > verify the connection with command: > > D IOS,EKM,VERIFY=ALL > > IOS099I 17.58.55 EKM HOSTS > PRIMARY HOSTNAME=172.23.7.2:3801 > SECONDARY HOSTNAME=172.23.1.1:3801 > MAX CONNECTIONS = 255, PERMANENT CONNECTIONS = 008 VERIFICATION WILL > COMPLETE ASYNCHRONOUSLY > > IOS631I PRIMARY ENCRYPTION KEY MANAGER WAS SUCCESSFULLY CONNECTED > IOS631I SECONDARY ENCRYPTION KEY MANAGER WAS SUCCESSFULLY CONNECTED > > Ken -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN The information contained in this message is confidential, protected from disclosure and may be legally privileged. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any disclosure, distribution, copying, or any action taken or action omitted in reliance on it, is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by replying to this message and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
