Using ACF2 Keyring Getting GIMSMP RC 10220, Code 17 FTP download a product from IBM site.

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

This document describes possible GIMSMP Return Code = 10220, Error Code = 17 error message when trying to FTP download a product using SMP/E with Keyring and certificates stored in the ACF2 INFOSTG database.

What could cause a GIMSMP Return Code = 10220, Error Code = 17 error message when trying to FTP download a product using SMP/E?

Environment

z/OS 2.1 and above.

Resolution

When using GIMSMP there are two different IBM servers, one for Internet Service Retrieval and one for FTP product download:

IBM FTP download uses the IBM deliverycb-bld.dhe.ibm.com sever. 

IBM Internet Service Retrieval uses the IBM eccgw01.boulder.ibm.com server.

Each server requires different CERTAUTH certificates. If the wrong CERTAUTH certificates are used for either server the "Authentication negotiation failed" GIMSMP Return Code = 10220, Error Code = 17 error will occur.

To address the problem download the recommended certificates for the appropriate IBM server that is being used.