Top Secret FTPS fails on z/OS 2.3 with TSS7257E Unauthorized Access Level for CSFSERV

Products

• Top Secret

Issue/Introduction

After upgrading from z/OS 2.1 to z/OS 2.3, executing an FTPS results in the following Top Secret error messages:

TSS7257E Unauthorized Access Level for CSFSERV <CSFRNG>
TSS7257E Unauthorized Access Level for CSFSERV <CSFIQA>
TSS7257E Unauthorized Access Level for CSFSERV <CSFRNG>

Environment

Release : 16.0

Component : Top Secret for z/OS

Resolution

The violation message TSS7257E Unauthorized Access Level for CSFSERV shows the ACID has access to the resource CSFSERV but not the required access. Run a TSSUTIL Report to show what the requested and allowed access levels are. For example, the requested access might be CONTROL but the allowed acces is READ.

You will need to permit the required access to the acid or profile 

TSS PER(xxxx) CSFSERV(CSFIQA) ACCESS(xxx)
TSS PER(xxxx) CSFSERV(CSFRNG) ACCESS(xxx)

For additional CSFSERV information see CSFSERV Resource Class—Secure ICSF CSFSERV
For Top Secret commands for creating authorizations for z/OSMF core functions on your system, see Define Authorizations for the z/OSMF Core Services.