Coding ACF2 rule with 'WHEN' to address IEC161I 069, getting ACF70023 WARNING - WHEN INVALID - FIELD IGNORED

Products

• ACF2 - z/OS

Issue/Introduction

When trying to configure support for pervasive encryption trying to change the rule to include the when getting ACF70023 WARNING - WHEN INVALID - FIELD IGNORED:

$KEY(XXXXXXXX) TYPE(CSK)                                 
 KEY22 UID(***USER) PREVENT                        
 KEY01 UID(*) ALLOW WHEN(CRITERIA(SMS(DSENCRYPTION)))  

ACF COMPILER ENTERED                                 
                                                     
COMPILING - XXXXXXXX, MEMBER=XXXXXXXX                   
WARNING - WHEN INVALID - FIELD IGNORED               
TOTAL RECORD LENGTH= 396 BYTES, 9 PERCENT UTILIZED 

 

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

RULELONG is required for pervasive Encryption support.
Resource rules for key labels must specify a new resource rule parameter of "WHEN(CRITERIA(SMS(DSENCRYPTION)))".
To specify the WHEN parameter in resource rules, you must have the RULELONG parameter that is configured in the
GSO RULEOPTS record. If the RULELONG parameter is not enabled on your system, the rules that specify the WHEN parameter will not compile.

See Article ID: 237359 How to implement RULELONG with the ACF2 databases for details.