Has anyone applied IBM CSAUSERKEY=yes?

[Dan Kolb]

An attempt was made to change the ALLOWUSERKEYCSA from No to Yes this weekend.

All IDMS regions abended with a SB78-5C.

Currently at r19.0 base with plans to go to latest maintenance upgrade in August.

[Dan Kolb]

I miss spoke.  They tried to implement CSAUSERKEY= NO.  

After the abends it was put BACK to YES.

[Stephen Franzon]

Dan,
Have a look at this article. You need to follow certain steps to use ALLOWUSERKEYCSA(NO)

https://knowledge.broadcom.com/external/article?articleId=117597

[Chris Hoelscher]

I had to follow this exactly

 

 

 

Chris Hoelscher

Lead Sys DBA

IBM Global Technical Services on assignmemt to Humana Inc.

T 502.476.2538  or 502.407.7266

 

Attachment(s)

CA IDMS - 19.0_ENU - Storage Key Considerations for z OS ...0_ENU - Storage Key Considerations for z OS CSA Subpools - 20181108   145 KB 1 version

[Dan Kolb]

We followed it as well.  But the CSAUSERKEY was changed to No while the CVs were up and running as a preliminary step by the ZOS folks and all the CVs abended, some not immediately.

I found that not all the steplibs were authorized, so we corrected that, still abending.

Scheduling another attempt.

[Chris Hoelscher]

Changing the CSAUSERKEY value whilst IDMS is up is a path fraught with dangers (like reloading a SVC)

 

Things to doublecheck

 

Authorize that load library by adding a control statement to the appropriate SYS1.

PARMLIB(PROG..) member, for example, APF ADD DSNAME(my.apflib) VOLUME(vvvvvv).

 

Update the appropriate SYS1.PARMLIB(SCHED..) member to include the following line:

PPT PGMNAME($STARTUP),KEY(4),NOSWAP

                Where $STARTUP

Specifies the CA IDMS/DC startup module name - RHDCOMVS, IDMSDC, or IDMSDCV.

 

Assure #SVCOPT has either CVKEY=* or the new CVKEY ( we went with 4) (oh yeah, change the sysgen)

Refresh the new SVC with CAIRIM before bring up idms

 

 

 

 

 

 

 

 

Chris Hoelscher

Lead Sys DBA

IBM Global Technical Services on assignmemt to Humana Inc.

T 502.476.2538  or 502.407.7266

 

[WAYNE Betchel]

Regard the CSAUSERKEY, has anyone done this for a R10.2 system running on z/OS 2.4? (or any release of z/os). We still have a R10.2 system running and are upgrading to z/OS 2.4 and looking for any additional caveats.