ACF2 CICS DFHPA1909 FMA1CICS DATA INVALID FOR 'KEYRING'. RESPECIFY KEYWORD AND DATA OR BYPASS WITH

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• LDAP SERVER FOR Z/OS
• PAM CLIENT FOR LINUX ON MAINFRAME
• WEB ADMINISTRATOR FOR TOP SECRET

Issue/Introduction

After assigning a new Entrust certificate in ACF2 for CICS, CICS receives the message 'FHPA1909 FMA1CICS DATA INVALID FOR 'KEYRING'. RESPECIFY KEYWORD AND DATA OR BYPASS WITH '.END': 'XXXXSYSX'.

 

Environment

Release : 2.3

Component : CA ACF2 for z/OS

Resolution

According to IBM documentation for CICS Transaction Server section 'Building a key ring manually' "The key ring must be associated with the CICS region user ID."

Also from IBM Support 'DFHPA1909 when attempting to use SSL':

Resolving The Problem
Change the Owner of the KEYRING Name to that of the CICS Region UserID as specified in Creating new certificates in the CICS information center.