CWPKI0033E Error when setting up z/OSMF Keyring with ACF2
Article ID: 220192
Updated On:
Products
Issue/Introduction
When initializing z/OSMF after setting up the keyring and digital certificates, the following error is seen:
CWPKI0033E: The keystore located at safkeyringhybrid:///IZUKeyring.IZUDFLT did not load because of the following error: Errors encountered loading keyring. Keyring could not be loaded as a JCECCARACFKS or JCERACFKS keystore.
Resolution
The most common cause of this issue is due to the syntax on the safkeyringhybrid parameter being incorrect.
The syntax for safkeyringhybrid is safkeyringhybrid:///UserID/Keyring.name
To resolve the issue:
- Perform a TSO ACF2 LIST of the keyring:
KEYRING / TESTUSR.RING LAST CHANGED BY TESTUSR ON 07/13/21-14:00
DEFAULT(USER1.CERT) RINGNAME(IZUKeyring.IZUDFLT)
- Verify that your RINGNAME for the keyring matches what is in the Keyring.name parameter (this is case sensitive).
- Add the ringowner for the safkeyringhybrid UserID parameter.
Feedback
