Pervasive Encryption Errors IGD17151I, IGD17155I, IGD17156I,IGD17157I, IEF344I allocating an encrypted dataset

Products

• ACF2
• Top Secret

Issue/Introduction

Pervasive Encryption with ACF2, Top Secret or RACF. When trying to allocate an encrypted dataset the following possible error messages an occur:

IGD17156I xxxxxx.TEST.ENCRYPT.DATA , KEY LABEL IS IGNORED BECAUSE DATA SET TYPE IS NOT SUPPORTED FOR ENCRYPTION. ALLOCATION CONTINUES

IEF344I USERxx ALLOCATE DD1 - ALLOCATION FAILED DUE TO DATA FACILITY SYSTEM ERROR
IGD17157I DSNTYPE BASIC IS NOT A SUPPORTED DATA SET TYPE FOR ENCRYPTION BECAUSE STGADMIN.SMS.ALLOW.DATASET.SEQ.ENCRYPT IS NOT DEFINED                   
IGD17151I ALLOCATION FAILED FOR DATA SET xxxxxx.TEST.ENCRYPT.DATA BECAUSE A KEY LABEL IS SPECIFIED FOR AN UNSUPPORTED DATA SET TYPE.

IGD17156I USER01.SMS.ENCRYPT.DATA, KEY LABEL IS IGNORED BECAUSE DATA SET TYPE IS NOT SUPPORTED FOR ENCRYPTION. ALLOCATION CONTINUES 

IEF344I USERxx ALLOCATE DD1 - ALLOCATION FAILED DUE TO DATA FACILITY SYSTEM ERROR
IGD17155I ALLOCATION FAILED FOR ENCRYPTED DATA SET USER01.SMS.ENCRYPT.DATA DUE TO INSUFFICIENT AUTHORITY TO FACILITY CLASS RESOURCE  STGADMIN.SMS.ALLOW.DATASET.ENCRYPT

Resolution

Possible allocation errors and causes

Example 1:

If RACROUTE EXTRACT for STGADMIN.SMS.ALLOW.DATASET.SEQ.ENCRYPT is not found and access to STGADMIN.SMS.FAIL.INVALID.DSNTYPE.ENC fails, a non-encrypted data set is allocated. 

IGD17156I xxxxxx.TEST.ENCRYPT.DATA , KEY LABEL IS IGNORED BECAUSE DATA SET TYPE IS NOT SUPPORTED FOR ENCRYPTION. ALLOCATION CONTINUES
IGD101I SMS ALLOCATED TO DDNAME (DD1) DSN (xxxxxx.TEST.ENCRYPT.DATA) STORCLAS (SMSVOL) MGMTCLAS (SMSVOL) DATACLAS (SMSVOL)  VOL SER NOS=xxxxxx

These messages can occur when allocating a data set using a DATASET Profile record and the RACROUTE EXTRACT call fails for STGADMIN.SMS.ALLOW.DATASET.SEQ.ENCRYPT, however in this example a NON-ENCRYPTED data set is allocated because access is NOT ALLOWED to the STGADMIN fail resource.

Example 2:

If RACROUTE EXTRACT for STGADMIN.SMS.ALLOW.DATASET.SEQ.ENCRYPT is not found and access to STGADMIN.SMS.FAIL.INVALID.DSNTYPE.ENC is allowed no data set is allocated.
 
IEF344I USERxx ALLOCATE DD1 - ALLOCATION FAILED DUE TO DATA FACILITY SYSTEM ERROR
IGD17157I DSNTYPE BASIC IS NOT A SUPPORTED DATA SET TYPE FOR ENCRYPTION BECAUSE STGADMIN.SMS.ALLOW.DATASET.SEQ.ENCRYPT IS NOT DEFINED

IGD17151I ALLOCATION FAILED FOR DATA SET xxxxxx.TEST.ENCRYPT.DATA BECAUSE A KEY LABEL IS SPECIFIED FOR AN UNSUPPORTED DATA SET TYPE.

These messages can occur when allocating a data set using a DATASET Profile record and the RACROUTE EXTRACT call fails for STGADMIN.SMS.ALLOW.DATASET.SEQ.ENCRYPT, and no dataset is allocated because access is ALLOWED to STGADMIN fail resource.

Example 3:

If access to STGADMIN.SMS.ALLOW.DATASET.ENCRYPT FACILITY resource class is not allowed and access to STGADMIN.SMS.FAIL.INVALID.DSNTYPE.ENC fails, a non-encrypted data set is allocated.
 
IGD17156I USER01.SMS.ENCRYPT.DATA, KEY LABEL IS IGNORED BECAUSE DATA SET TYPE IS NOT SUPPORTED FOR ENCRYPTION. ALLOCATION CONTINUES
IGD101I SMS ALLOCATED TO DDNAME (DD1) DSN (USER01.SMS.ENCRYPT.DATA)

These messages can occur when allocating a data set using explicit DSKEYLBL and DSNTYPE parameters and access is not allowed to the  STGADMIN.SMS.ALLOW.DATASET.ENCRYPT resource, however a NON-ENCRYPTED data set is allocated because access is NOT ALLOWED to the STGADMIN fail resource.

Example 4:

If access to STGADMIN.SMS.ALLOW.DATASET.ENCRYPT FACILITY resource class is not allowed and access to STGADMIN.SMS.FAIL.INVALID.DSNTYPE.ENC is allowed, allocation fails.
 
IEF344I USERxx ALLOCATE DD1 - ALLOCATION FAILED DUE TO DATA FACILITY SYSTEM ERROR
IGD17155I ALLOCATION FAILED FOR ENCRYPTED DATA SET USER01.SMS.ENCRYPT.DATA DUE TO INSUFFICIENT AUTHORITY TO FACILITY CLASS RESOURCE STGADMIN.SMS.ALLOW.DATASET.ENCRYPT

These messages can occur when allocating a data set using explicit DSKEYLBL and DSNTYPE parameters and access is not allowed to the  STGADMIN.SMS.ALLOW.DATASET.ENCRYPT resource, and no dataset is allocated because access is ALLOWED to the STGAMDIN Fail resource.