ARC1604I Running RECOVER HSM Command With Top Secret

Products

• Top Secret

Issue/Introduction

The following message was observed when the RECOVER command from DFHSM was issued:

ARC1604I COMMAND NOT AUTHORIZED FOR USER

Is this related to any permission given on Top Secret?

Resolution

The first step is to check if there is an ARC1001I message preceding the ARC1604I. The ARC1001I message will show the return and reason codes. With the reason code, it is possible to determine where this permission error is coming from.

The most common reason code is 0, which means that the user has not been authorized for the command by the AUTH command. The AUTH command is managed by DFHSM and not by Top Secret.

The user has to have the permissions issued by the HSEND AUTH command, as indicated at the AUTH Command: Identifying authorized users page.