ACF2 CICS DFHPA1909 DATA INVALID FOR 'KEYRING'

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

After assigning a new digital certificate in ACF2 for CICS, CICS receives the message 'FHPA1909 xxxxxxxx DATA INVALID FOR 'KEYRING'. RESPECIFY KEYWORD AND DATA OR BYPASS WITH '.END': 'xxxxxxxx'.

 

Environment

Release : ACF2 R16

Component : CA ACF2 for z/OS

Resolution

According to IBM documentation for CICS Transaction Server section Building a key ring manually: The key ring must be associated with the CICS region user ID.

Also from IBM Support DFHPA1909 when attempting to use SSL:

Resolving The Problem
Change the Owner of the KEYRING Name to that of the CICS Region UserID as specified in Creating new certificates in the CICS information center.