ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Coding ACF2 rule with 'WHEN' to address IEC161I 069, getting ACF70023 WARNING - WHEN INVALID - FIELD IGNORED

book

Article ID: 237360

calendar_today

Updated On:

Products

ACF2 - z/OS

Issue/Introduction

When trying to configure support for pervasive encryption trying to change the rule to include the when getting ACF70023 WARNING - WHEN INVALID - FIELD IGNORED:

$KEY(DB2TST) TYPE(CSK)                                 
 KEY22 UID(***TSTARKA) PREVENT                        
 KEY22 UID(***TSTARKB) PREVENT                        
 KEY22 UID(***TSTOBSB) PREVENT                        
 KEY22 UID(***TSTT6025A) PREVENT                        
 KEY22 UID(***TST6039A) PREVENT                        
 KEY22 UID(***TST6280A) PREVENT                        
 KEY01 UID(*) ALLOW WHEN(CRITERIA(SMS(DSENCRYPTION)))  

ACF COMPILER ENTERED                                 
                                                     
COMPILING - DB2TST, MEMBER=DB2TST                    
WARNING - WHEN INVALID - FIELD IGNORED               
TOTAL RECORD LENGTH= 396 BYTES, 9 PERCENT UTILIZED 

Carolyn

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

RULELONG is required for pervasive Encryption support. Resource rules for key labels must specify a new resource rule parameter of "WHEN(CRITERIA(SMS(DSENCRYPTION)))". To specify the WHEN parameter in resource rules, you must have the RULELONG parameter that is configured in the GSO RULEOPTS record. If the RULELONG parameter is not enabled on your system, the rules that specify the WHEN parameter will not compile.

See Article ID: 237359 How to implement RULELONG with the ACF2 databases for details.