Getting TSS0390E Unexpected Error , CODE = 193 on adding certificate to keyring

Products

• Top Secret

Issue/Introduction

When adding a CA Certificate to an existing keyring and getting the following:

TSS0390E Unexpected Error , CODE = 193

TSS0301I ADD FUNCTION FAILED, RETURN CODE = 16

TSS ADD(acid) KEYRING(RING_NAME) RINGDATA(CERTAUTH,CERT_NAME) USAGE(CERTAUTH)

Environment

Release :

Component : CA Top Secret for z/OS

Cause

he VSAM security file Digital Certificates have a limit the number of certificates that can be attached to a single KEYRING. Approximately 460.

For customers that have reached this limit, an attempt to ADD a certificate

or KEYRING will receive the following message:

TSS0390E UNEXPECTED ERROR, CODE = 193

Resolution

When this is encountered, the certificate or KEYRING will be attached, but

the WHOHAS information will not be updated. In order to rectify this

condition, in the short term, you can implement a new certificate or KEYRING

If this is not a viable long term solution, you will need to leverage the

solution for this problem and use an expanded version of the VSAM security

file option (see steps below).

JCL to REPRO into the expanded VSAM security file:

--------------------------------------------------

 //*

 //*=========================================================

 //* REPRO OLD FILE INTO NEW FILE

 //*

 //* VSAMFILE is old vsam file or old vsam backup file.

 //* VSAMNEW is new vsam file.

 //*

 //*=========================================================

 //REPRO EXEC PGM=IDCAMS,REGION=1024K

 //VSAMFILE DD DISP=SHR,DSN=TSSVSHR.TSS14V.VSAMBKUP

 //VSAMNEW DD DISP=SHR,DSN=TSSXE05.TSS15V.VSAMFILE

 //SYSPRINT DD SYSOUT=*

 //SYSIN DD *

   REPRO INFILE(VSAMFILE) OUTFILE(VSAMNEW) REUSE REPLACE

 /*

 //*=======================================================

 //* BLDAIX - Build alternate index for new file

 //*=======================================================

 //BLDAIX EXEC PGM=IDCAMS,REGION=6000K

 //INCSI DD DISP=SHR,DSN=TSSXE05.TSS15V.VSAMFILE

 //OUTCSI DD DISP=SHR,DSN=TSSXE05.TSS15V.AIX

 //SYSPRINT DD SYSOUT=*

 //SYSIN DD *

   BLDINDEX INFILE(INCSI) OUTFILE(OUTCSI) SORTCALL

 /*

 //

CIRCUMVENTION:

Remove Keyrings from the certificate until one is below the 24k limit.

Approximate 460 keyring.