ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

ACF2 GENREQ command gets CAS20EDE Operation GENREQ cannot be performed - User is not defined as OMVS user

book

Article ID: 239546

calendar_today

Updated On:

Products

ACF2

Issue/Introduction

Want to extract certificate for renewal with the ACF2 GENREQ command getting: CAS20EDE Operation GENREQ cannot be performed - User is not defined as OMVS user

 

Environment

Release : 12.0

Component : ACF2 for z/OS

Resolution

In order for a logonid to issue any ACF2 certificate Administrative commands, the logonid must be defined to OMVS, meaning there must be a OMVS User Profile defined for the logonid with a UID value specified and there must be a logonid GROUP specified for the logonid and that there is an OMVS Group Profile record defined for that group with a GID value specified.

If the logonid that is issuing the certificate administrative command is not defined to OMVS the 'CAS20EDE Operation GENREQ cannot be performed - User is not defined as OMVS user' error message will be issued.

To address the error ensure that the logonid issuing the command has an OMVS User Profile record defined with a UID and the GROUP field on the logonid that has a GID defined.

Additional Information

Techdoc:

CAS20EDE – Operation cmd cannot be performed. - reason

Where cmd = GENCERT, GENREQ, RENEW
reason = User is not defined as OMVS user

Reason:
Some certificate related commands now require the user be defined as an OMVS user.  The commands include GENCERT, GENREQ and RENEW.  Renew issues a GENREQ operation internally and if the user is not an OMVS user, the reason will indicate GENREQ.

Action:
Define the user as an OMVS user.  User must have a Unix UID and a group value that has a Unix GID value.