Trying to run Broadcom's CSM Migration tool to migrate a CSI fails with either of the following errors:
*ERROR* (hwthconn) at time: 06:07:15
Rexx RC: 0, Toolkit ReturnCode: 262
DiagArea.Service: 1245184
DiagArea.ReasonCode: 202
DiagArea.ReasonDesc: Error detected while opening the certificate database
*ERROR* (hwthconn) at time: 06:07:15
Rexx RC: 0, Toolkit ReturnCode: 262
DiagArea.Service: 1441793
DiagArea.ReasonCode: 428
DiagArea.ReasonDesc: Key entry does not contain a private key
Release : 6.0
The RACF userid for the user running the CSM Conversion Tool needs access to the keyring and private key of the PERSONAL certificate that z/OSMF uses.
It is recommended to use the RDATALIB class in order to share the keyring and certificate with the IZUSVR task and users using the Conversion Tool. Here are the steps to do this in RACF:
The alternative method would be to perform the following in order to use FACILITY class rules. It is much easier and highly recommended to use the RDATALIB class method above.
If the certificate is not owned by SITE, complete 1-4. If SITE is the owner of the certificate skip to step 5:
PERMIT IRR.DIGTCERT.LISTRING CLASS(FACILITY) ID(userid_for_conversion_user) ACCESS(UPDATE)
PERMIT IRR.DIGTCERT.GENCERT CLASS(FACILITY) ID(userid_for_conversion_user) ACCESS(CONTROL)