Using CA Top secret utility TSSXTEND it abends with U3044

Products

• Top Secret

Issue/Introduction

Why do we get an abend U3044 from the CA Top secret utility TSSXTEND? 

Environment

z/OS

Resolution

The old security files were defined with the AES feature. The new security files were defined without the AES feature.
It's not allowed to copy an AES secfile to a non-AES secfile, hence the abend U3044.

You have to defined the new security file with the AESENCRYPTION  or AES256ENCRYPT TSSXTEND option .

See the links below: 

Convert DES to AES 128

Convert DES to AES 256