IBM Support

PH57123: IBMPKCS11IMPL FAILS TO INITIALIZE AFTER CUSTOMER MIGRATED FROM Z/OS 2.5 TO Z/OS 3.1

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • Error Message: The IBMPKCS11Impl provider fails to initialize
    when used on a z/OS 3.1 system.
    .
    Stack Trace: Exception in thread "main"
    java.lang.RuntimeException:
    java.security.NoSuchProviderException: No such provider:
    IBMPKCS11Impl-jazzsv1
            at Encrypt0.main(Encrypt0.java:196)
    Caused by: java.security.NoSuchProviderException: No such
    provider: IBMPKCS11Impl-jazzsv1
            at javax.crypto.Cipher.getInstance(Unknown Source)
            at Encrypt0.main(Encrypt0.java:129)
    Also exceptions containing this "caused by":
    Caused by: com.ibm.pkcs11.PKCS11Exception: Invalid dll name :
    /usr/lpp/pkcs11/lib/csnpca64
    at
    com.ibm.crypto.pkcs11impl.provider.IBMPKCS11Impl.<init>(IBMPKCS1
    1Impl.java:570)
    .
    

Local fix

  • Use a different Java security provider.
    

Problem summary

  • The ICSF PKCS11 API version changed from 2 to 3. The
    IBMPKCS11Impl security provider was checking for version 2.
    

Problem conclusion

  • The PKCS11 API version check has been modified to allow version
    3 also.
    .
    This APAR will be fixed in the following Releases:
    .
    IBM SDK, Java Technology Edition
       8    SR8 FP11  (8.0.8.11)
    .
    Contact your IBM Product's Service Team for these Service
    Refreshes and Fix Packs.
    For those running stand-alone, information about the available
    maintenance can be found at:
               https://www.ibm.com/support/pages/java-sdk
    

Temporary fix

Comments

APAR Information

  • APAR number

    PH57123

  • Reported component name

    JAVA Z/OS 64

  • Reported component ID

    620700104

  • Reported release

    800

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2023-09-22

  • Closed date

    2023-09-22

  • Last modified date

    2023-09-22

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    JAVA Z/OS 64

  • Fixed component ID

    620700104

Applicable component levels

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"800","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
23 September 2023