After z/OS upgrade IOSAS start fails at IPL IOS627E IOS628E

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

After z/OS upgrade, the initial IPL fails because IOSAS cannot start. Either or both of these messages are seen: 

IOS627E xxxxxxxx INTERFACE WITH ENCRYPTION KEY MANAGER CANNOT BE CONNECTED DUE TO OMVS SEGMENT FAILURE FOR IOSAS   

IOS628E ENCRYPTION ON DEVICE XXXXX HAS FAILED DUE TO OMVS SEGMENT FAILURE FOR IOSAS.

 

 

 

 

 

 

 

 

Environment

Release : 16.0 ACF2MS

Cause

With z/OS 2.1 IBM removed the use of default OMVS profiles for UID and GID. As IOSAS uses OMVS, a profile record is needed.

Resolution

A logonid record and an OMVS profile record are defined.  The OMVS segment is for TCP/IP connectivity only and UID(0) or superuser ability is not required. UID as appropriate for the site is set.

1) An OMVS segment for IOSAS (IOS address space) is inserted. From the TSO ACF prompt:

Set PRO(US) DIV(OMVS)

INSERT IOSAS  UID(nnnn) HOME(/)

2) An IOSAS logonid with NON-CNCL and STC is inserted.   From the TSO ACF prompt,

INSERT IOSAS STC NON-CNCL NAME(IOSAS ID) UID(nnnn) HOME(/)