E-Business Server:Cannot disable USEICSF - Revision history

Badm1 at 16:44, 21 October 2019

2019-10-21T16:44:54Z

2015-01-06T18:44:11Z

2015-01-06T18:44:01Z

2015-01-06T18:43:49Z

2015-01-06T18:43:02Z

2014-07-08T17:39:50Z

2014-07-08T17:39:40Z

2014-07-08T17:38:56Z

2014-07-08T17:38:37Z

2014-07-08T17:38:18Z

@@ Line 8: / Line 8: @@
 IBM z/OS<br />
 IBM USS<br />
 '''Problem'''

← Older revision		Revision as of 18:44, 6 January 2015
Line 12:		Line 12:

	Integrated Cryptographic Service Facility (ICSF) is used even after USEICSF=NO is coded in the config file.		Integrated Cryptographic Service Facility (ICSF) is used even after USEICSF=NO is coded in the config file.
−

	NOTE: You can use ICSF only if it is available on your computer.		NOTE: You can use ICSF only if it is available on your computer.

@@ Line 10: / Line 10: @@
 '''Problem'''
 Integrated Cryptographic Service Facility (ICSF) is used even after&nbsp;USEICSF=NO is coded in the config file.
 NOTE: You can use ICSF only if it is available on your computer.
 '''Solution'''
 Upgrade to 7.7.0 or higher.  USEICSF is deprecated as of release 7.7.0, and is replaced by ICSFENCRYPT for data encryption and ICSFRANDOM for random number generation.  The default action is to enable both.
 Note that prior to 7.7, USEICSF =ON / OFF was used to determine whether entropy is automatically generated for key creation AND the use of ICSF for 3DES data encryption. The latter function should have been disabled by USEICSF = NO, but it was not.  In 7.7 the two features are controlled separately, and the controls work for both.

@@ Line 16: / Line 16: @@
 '''Solution'''
-This issue is being evaluated for consideration in a future release or patched version of the product and an internal product issue has been opened. If this issue significantly impacts your business operations, contact SDS support.
+Upgrade to 7.7.0 or higher.  USEICSF is deprecated as of release 7.7.0, and is replaced by ICSFENCRYPT for data encryption and ICSFRANDOM for random number generation.  The default action is to enable both.
-Note that USEICSF =ON / OFF will still determine whether or not entropy is automatically generated for key creation (USEICSF = ON will turn on automatic entropy generation).
+Note that prior to 7.7, USEICSF =ON / OFF was used to determine whether entropy is automatically generated for key creation AND the use of ICSF for 3DES data encryption. The latter function should have been disabled by USEICSF = NO, but it was not.  In 7.7 the two features are controlled separately, and the controls work for both.

@@ Line 5: / Line 5: @@
 '''Environment'''
 E-Business Server 7.x<br />
 IBM z/OS<br />