Error CWWKS2911E logging into IZUSVR from browser with Top Secret

Products

• Top Secret

Issue/Introduction

After mounting the correct Liberty and Java filesystem, then started IZUSVR1, the following security errors can be seen when attempting to login from the browser:

[AUDIT   ] CWWKF0011I: The zosmfServer server is ready to run a smarter planet. The zosmfServer server started in 25.866 seconds.
 [ERROR   ] CWWKS2911E: SAF Service RACROUTE_AUTH did not succeed because the resource profile IZUDFLT.ZOSMF.RESOURCE_POOL.WLM.IYU0 in class ZMFCLOUD does not exist. SAF return code 0x00000004. RACF return code 0x00000004. RACF reason code 0x00000000.
 [ERROR   ] CWWKO0801E: Unable to initialize SSL connection. Unauthorized access was denied or security settings have expired. Exception is javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown

Environment

Release : 16.0

Resolution

In this case the violation report shows 08-88 violations for APPL(IZUDFLT) and this means the involved acid doesn't have any permission to the resource.

To permit it the following TSS command should be issued : 

TSS PERMIT(acid) APPL(IZUDFLT)
TSS REFRESH(acid) JOBNAME(*)