PH57123: IBMPKCS11IMPL FAILS TO INITIALIZE AFTER CUSTOMER MIGRATED FROM Z/OS 2.5 TO Z/OS 3.1

APAR status

• Closed as program error.

Error description

• Error Message: The IBMPKCS11Impl provider fails to initialize
  when used on a z/OS 3.1 system.
  .
  Stack Trace: Exception in thread "main"
  java.lang.RuntimeException:
  java.security.NoSuchProviderException: No such provider:
  IBMPKCS11Impl-jazzsv1
   at Encrypt0.main(Encrypt0.java:196)
  Caused by: java.security.NoSuchProviderException: No such
  provider: IBMPKCS11Impl-jazzsv1
   at javax.crypto.Cipher.getInstance(Unknown Source)
   at Encrypt0.main(Encrypt0.java:129)
  Also exceptions containing this "caused by":
  Caused by: com.ibm.pkcs11.PKCS11Exception: Invalid dll name :
  /usr/lpp/pkcs11/lib/csnpca64
  at
  com.ibm.crypto.pkcs11impl.provider.IBMPKCS11Impl.<init>(IBMPKCS1
  1Impl.java:570)
  .
  

Local fix

• Use a different Java security provider.
  

Problem summary

• The ICSF PKCS11 API version changed from 2 to 3. The
  IBMPKCS11Impl security provider was checking for version 2.
  

Problem conclusion

• The PKCS11 API version check has been modified to allow version
  3 also.
  .
  This APAR will be fixed in the following Releases:
  .
  IBM SDK, Java Technology Edition
   8 SR8 FP11 (8.0.8.11)
  .
  Contact your IBM Product's Service Team for these Service
  Refreshes and Fix Packs.
  For those running stand-alone, information about the available
  maintenance can be found at:
   https://www.ibm.com/support/pages/java-sdk
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA Z/OS 64

• Fixed component ID

  620700104

Applicable component levels