ACF89810 UNABLE TO IMPLANT DELETE CDE HOOK w/UJ92591 and IBM validated boot ptfs

Products

• ACF2 - z/OS

Issue/Introduction

Following received after applying RSU level.
 ACF89888 ACF2 SUBSYSTEM INITIALIZATION IN PROGRESS       
*ACF89810 UNABLE TO IMPLANT DELETE CDE HOOK               
 ACF89890 ACF2 SUBSYSTEM INITIALIZATION COMPLETE          
 CAS2031I CA SAF interface initialization complete     
the system went on to complete ACF2 initialization :
ACF8A900 ACF2 INITIALIZATION COMPLETE - CA ACF2  REL 16    

ZOS ptf UJ92591 applied which hits module CSVSBRTN 

 

Environment

Release : 16.0

Resolution

 ptf UJ92591 applied along with the rest of the "validated boot" ptfs for ZOS.
This validated boot feature is only available on Z16 hardware.
 
 LU09157 and LU10561 should be applied to resolve this problem.

Additional Information

https://www.ibm.com/docs/en/zos/2.5.0?topic=zos-what-is-validated-boot

Validated Boot for z/OS® is a solution that uses digital signatures to provide an initial program load (IPL)-time
check that validates that IPL data is intact, not tampered with, and originated from a trusted source.
It also enables detection of unauthorized changes to software executables.

By using Validated Boot for z/OS, you have the ability to meet regulatory compliance standards,
including National Information Assurance Partnership (NIAP) certification, that are required for certain
secure software deployment scenarios. |
Additionally, you can detect both accidental and malicious IPL data changes earlier, thus reducing
the impact of outages and stopping certain kinds of attacks.

Validated Boot for z/OS is implemented with updates to several elements, including MVS™, IPCS,
Program Management (Binder), and RACF®.

Validated Boot for z/OS requires an IBM® z16, with z/OS 2.5 or later for the target system.