z/VM 7.4 Directory changes impacting VM:Secure

Products

• VM:Secure for z/VM

Issue/Introduction

After applying VM:Secure PTF LU14631 and upgrading z/VM to 7.4, some directory entries no longer compile preventing VMSECURE from starting.

Environment

This article applies to both VM:Secure with Security and VM:Secure without security.

Cause

z/VM 7.4 no longer allows directory entries with the following:

- CPU statements with the CRYPTO operand
- CRYPTO statements with the following operands:
  - CSU
  - KEYENTRY
  - MODIFY
  - SPECIAL
- USER entries specifying both APVIRTUAL and DOMAIN
- USER entries specifying both APVIRTUAL and APDEDICATED

Resolution

Modify the identified directory entries to no longer specify the invalid operands.

Additional Information

VM:Secure PTF LU14631 updates VM:Secure's directory entry processing to reject directory entries with the above disallowed operands.

Startup failure for CRYPTO operand on the CPU statement:
   17:02:14 VMSECURE 0006 VMXDXS0055E Invalid parameter on CPU record at 'CRYPTO'.    
   17:02:14 VMSECURE 0006 VMXDXS0056I On record 8 in file 'USER001 MNGR001 U '.        
   17:02:14 VMSECURE 0006 VMXDXS0050I Record is: 'CPU 01 CRYPTO'.                      

Startup failures for invalid CRYPTO operands:
   17:02:14 VMSECURE 0006 VMXDXS0055E Invalid parameter on CRYPTO record at 'CSU'.    
   17:02:14 VMSECURE 0006 VMXDXS0056I On record 12 in file 'USER002 MNGR001 U '.      
   17:02:14 VMSECURE 0006 VMXDXS0050I Record is: 'CRYPTO CSU 1'.                      
   
   17:02:14 VMSECURE 0006 VMXDXS0055E Invalid parameter on CRYPTO record at 'KEYENTRY'.
   17:02:14 VMSECURE 0006 VMXDXS0056I On record 13 in file 'USER002 MNGR001 U '.      
   17:02:14 VMSECURE 0006 VMXDXS0050I Record is: 'CRYPTO KEYENTRY'.                    
   
   17:02:14 VMSECURE 0006 VMXDXS0055E Invalid parameter on CRYPTO record at 'SPECIAL'.
   17:02:14 VMSECURE 0006 VMXDXS0056I On record 14 in file 'USER002 MNGR001 U '.      
   17:02:14 VMSECURE 0006 VMXDXS0050I Record is: 'CRYPTO SPECIAL'.                    
   
   17:02:14 VMSECURE 0006 VMXDXS0055E Invalid parameter on CRYPTO record at 'MODIFY'.  
   17:02:14 VMSECURE 0006 VMXDXS0056I On record 15 in file 'USER002 MNGR001 U '.      
   17:02:14 VMSECURE 0006 VMXDXS0050I Record is: 'CRYPTO MODIFY'.                      

Startup failure for mutually exclusive CRYPTO APVIRTUAL and CRYPTO DOMAIN:
- When APVIRTUAL is first
   17:02:14 VMSECURE 0006 VMXDXS0055E Invalid parameter on CRYPTO record at 'DOMAIN'.  
   17:02:14 VMSECURE 0006 VMXDXS0056I On record 9 in file 'USER003 MNGR001 U '.        
   17:02:14 VMSECURE 0006 VMXDXS0050I Record is: ' CRYPTO DOMAIN 1'.                  

- When DOMAIN is first
   09:49:32 VMSECURE 0006 VMXDXS0055E Invalid parameter on CRYPTO record at 'APVIRTUAL'.
   09:49:32 VMSECURE 0006 VMXDXS0056I On record 9 in file 'USER003 MNGR001 U '.        
   09:49:32 VMSECURE 0006 VMXDXS0050I Record is: ' CRYPTO APVIRTUAL'.                  

Startup failure for mutually exclusive CRYPTO APVIRTUAL and CRYPTO APDEDICATED:
- When APVIRTUAL is first
   11:26:51 SCHDO10  0021 VMXDXS0055E Invalid parameter on CRYPTO record at 'DOMAIN'.
   11:26:51 SCHDO10  0021 VMXDXS0056I On record 9 in file 'USER003 MNGR001 U '.        
   11:26:51 SCHDO10  0021 VMXDXS0050I Record is: ' CRYPTO DOMAIN 1 APDED 1'.        

- When DOMAIN is first
   10:05:07 VMSECURE 0006 VMXDXS0055E Invalid parameter on CRYPTO record at 'APVIRTUAL'.
   10:05:07 VMSECURE 0006 VMXDXS0056I On record 9 in file 'USER003 MNGR001 U '.        
   10:05:07 VMSECURE 0006 VMXDXS0050I Record is: ' CRYPTO APVIRTUAL'.