ACF2 Enqueue Held on ACFVSAM LOGONIDS when using AES256 encryption for the passwords.

Products

• ACF2 - z/OS
• ACF2 - MISC
• ACF2
• ACF2 - DB2 Option

Issue/Introduction

There is an exclusive ENQUEUE held on to LOGONIDS resource and all other tasks wait for the resource and the system goes into a hung state. Display of command D GRS,C  

XXXXXX is the ID that is performing below command

INSERT USING(XXXXXXXX) XXXXXXXX NAME(XXXXXXXX) PHONE(XXXXXXXX) PASSWORD(XXXXXXXX) PWPHRASE(XXXXXXXX)

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

The issue is related to the password encryption with AES2 encryption takes a much longer time than regular xdes or aes1 encryption due to the number of iterations of the encryption process.

This is standard for all ESMs. 

A password on a new logonid might only be a few seconds but a change to a logonid with password history active might take a much longer time - depending on the number of passwords in the password history - as each history entry must be checked for duplicate password.