IBM Support

As a user of the NSS daemon in FIPS 140 mode, what do I have to do to migrate to V2R1 Communications Server?

Question & Answer


Question

As a user of the NSS daemon in FIPS 140 mode, what do I have to do to migrate to V2R1 Communications Server?

Answer

As of z/OS V2R1 FIPS 140 support now requires ICSF services.

If the NSS daemon is configured in FIPS 140 mode, the daemon will fail to activate with the following message if ICSF is not active:

EZD1390I ICSF services are currently unavailable to the NSS daemon operating in FIPS 140 mode

Ensure ICSF is started before starting the NSS daemon if the NSS daemon is configured in FIPS 140 mode.

At NSS daemon startup, you can verify that ICSF is active by confirming the issuance of this message:

EZD1392I ICSF services are currently available to the NSS daemon

[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSSN3L","label":"z\/OS Communications Server"},"Platform":[{"code":"PF035","label":"z\/OS"}],"Component":"","Version":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}}]

Product Synonym

ZOSCS COMMSERVER

Document Information

Modified date:
14 September 2016

UID

dwa1187017