My VMXRPI CONFIG says ENCRYPT REVERSE.
Release : 3.2 RSU-1801
Component : CA VM:Secure for z/VM
Installing on z/VM 7.1
Verify you have Rules installed on this system.
Rules must be installed before you can encrypt, requiring two separate IPLs.
Issue command VMSECURE QCPCFG
If it gives you VMXMSC1117E then Rules are not installed in CP, therefore, PENCRYPT won't work.
That would also explain why RULEMAP got the VMXCMD1117E .
You can also try issuing VMSECURE RULES USER VMANAGER
Rules not being installed is the other thing that can cause the VMXCMD1117E you 're getting.
Rules not installed. Rules *must* be installed before you can encrypt, requiring two separate IPLs.