IBM Health Check report titled CHECK(IBMJES,JES_NJE_SECURITY) along with message IAZH403I

Products

• ACF2
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

IAZH403I Error encountered trying to determine the list of trusted nodes, nje_chk RC=rc

What is needed in ACF2 to resolve this Health Check and identify trusted nodes?

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Cause

IBM PTF UA92706 for APAR OA49171 introduced a new Health Check related to NJE security. 

ACF2 PTFs SO00955 and SO04159 added ACF2 support for the JES_NJE_SECURITY Health Check functionality introduced by IBM APAR 0A49171.  

Details of the required implementation  steps with examples are available:  

Implement ACF2 Support for the JES NJE Health Checker

Resolution

In ACF2, for a node to be considered trusted, the two following conditions are needed from the NJE record in GSO:

1)   VALIN needs to be set to ONLY

2)   INHERIT needs to be on. 

An ACF2  SHOW NJE command displays the NJE setttings:

-- NJE OPTIONS IN EFFECT --                                         
                                                                    
  NODE    VALIDATE  VALIDATE  INHERIT-    SEND    DEFAULT  SYSOUT   
NAME OR   INCOMING  OUTGOING    ANCE    ENCRYPTED LOGONID  DEFAULT  
  MASK      JOBS      JOBS    ALLOWED   PASSWORD           LOGONID  
 (BOTH)     (IN)      (OUT)     (IN)     (OUT)     (IN)     (IN)    
=======   ========  ========  ========  ========  =======  =======  
nodename     ONLY       NO       YES       NO      <NONE>   <NONE>