When trying to configure support for pervasive encryption trying to change the rule to include the when getting ACF70023 WARNING - WHEN INVALID - FIELD IGNORED:
$KEY(XXXXXXXX) TYPE(CSK)
KEY22 UID(***USER) PREVENT
KEY01 UID(*) ALLOW WHEN(CRITERIA(SMS(DSENCRYPTION)))
ACF COMPILER ENTERED
COMPILING - XXXXXXXX, MEMBER=XXXXXXXX
WARNING - WHEN INVALID - FIELD IGNORED
TOTAL RECORD LENGTH= 396 BYTES, 9 PERCENT UTILIZED
Release : 16.0
Component : ACF2 for z/OS
RULELONG is required for pervasive Encryption support.
Resource rules for key labels must specify a new resource rule parameter of "WHEN(CRITERIA(SMS(DSENCRYPTION)))".
To specify the WHEN parameter in resource rules, you must have the RULELONG parameter that is configured in the
GSO RULEOPTS record. If the RULELONG parameter is not enabled on your system, the rules that specify the WHEN parameter will not compile.
See Article ID: 237359 How to implement RULELONG with the ACF2 databases for details.