GIM44336S: Hardware error from call CSNDPKG

Products

• Common Services
• COMMON SERVICES FOR Z/OS

Issue/Introduction

Running CA SMP/E Internet Service Retrieval (RECEIVE ORDER) fails with the following error:

GIM44336S ** AN UNUSUAL CONDITION OCCURRED. GIMJVREQ - javax.net.ssl.SSLException:
              com.ibm.crypto.hdwrCCA.provider.JCECCARuntimeException: Hardware error from call CSNDPKG returnCode 8
              reasonCode 16000
GIM20501I    RECEIVE PROCESSING IS COMPLETE. THE HIGHEST RETURN CODE WAS 12.

Environment

Release : 15.0
Component : CA RECEIVE ORDER

Top Secret security environment.

Cause

Permission not permitted to CSFSERV resources

Resolution

Diagnosis uncovered a security issue with the CSFSERV resource class.

Grant read access to the following CSFSERV resources: CSFEDH, CSFPKX, and CSFPKG.

Additional Information

Search SYSLOG during the execution of RECEIVE ORDER job for security messages.

Run TSSUTIL report to gather additional information.

//RPT01    EXEC PGM=TSSUTIL,REGION=4000K
//SYSPRINT DD  SYSOUT=*
//UTILOUT  DD  SYSOUT=*
//SMFIN    DD  DSN=audit.tracking.file,DISP=SHR
//SMFIN1   DD  DSN=audit.tracking.file2,DISP=SHR [optional]
//SMFOUT   DD  DUMMY
//UTILIN   DD  *
 REPORT EVENT(VIOL) END
/*

Additional DEBUG setting can be added to the CLIENT section.

classpath="/usr/lpp/smp/classes"
javadebugoptions="-Dcom.ibm.smp.debug=severe
                  -Djavax.net.debug=all
                  -showversion" >

The IBM Knowledge Center link:

https://www.ibm.com/docs/en/zos/2.1.0?topic=messages-gim44336s