ARC1604I received when running RECOVER HSM command

Products

• Top Secret

Issue/Introduction

The following message was observed when it was issued the RECOVER command from DFHSM:

ARC1604I COMMAND NOT AUTHORIZED FOR USER

 

Is this related to any permission given on Top Secret?

Environment

Release : 16.0

Resolution

The first step is to check if there is a ARC1001I message preceding the ARC1604I. The ARC1001I message will show the return and reason codes. With the reason code it is possible to determine where this permission error is coming from.

The most common reason code is 0, which means that the user has not been authorized for the command by the AUTH command.

The AUTH command is managed by DFHSM and not by Top Secret.

The user has to have the permissions issued by the HSEND AUTH command, as indicated at the AUTH Command: Identifying authorized users page.

Additional Information

ARC1604I message description and its reason codes