VOOZH about

URL: https://www.ibm.com/support/pages/apar/PH67386

⇱ PH67386: IBMZSECURITY HAS A HARD DEPENDENCY ON OPENJCEPLUS

PH67386: IBMZSECURITY HAS A HARD DEPENDENCY ON OPENJCEPLUS

APAR status

  • Closed as program error.

Error description

  • Error Message: java.security.UnrecoverableKeyException: no such
provider: OpenJCEPlus
.
Stack Trace: Stack Trace:
 at
ibm.crypto.zsecurity/com.ibm.crypto.zsecurity.provider.KeyProtec
tor.a(KeyProtector.java:3)
 at
ibm.crypto.zsecurity/com.ibm.crypto.zsecurity.provider.JceRACFKe
yStore.engineGetKey(JceRACFKeyStore.java:462)
 at
java.base/java.security.KeyStore.getKey(KeyStore.java:1075)
 at
ibm.crypto.ibmjcehybrid/com.ibm.crypto.ibmjcehybrid.provider.Hyb
ridRACFKeyStore.cacheCertificateAndKeyMaterial(HybridRACFKeyStor
e.java:1133)
 at
ibm.crypto.ibmjcehybrid/com.ibm.crypto.ibmjcehybrid.provider.Hyb
ridRACFKeyStore.engineLoad(HybridRACFKeyStore.java:1073)
 at
java.base/java.security.KeyStore.load(KeyStore.java:1500)
 at
ibm.crypto.ibmjcehybrid/com.ibm.crypto.ibmjcehybrid.provider.Hyb
ridRACFKeyStore.engineLoad(HybridRACFKeyStore.java:1090)
.
CPACF is not enabled and OpenJCEPlus has been removed from the
java.security provider list

Local fix



Problem summary


    

  • Issue with IBMZSecurity hardcoded dependency on OpenJCEPlus



Problem conclusion


    

  • If IBMZSecurity calls OpenJCEPlus, and it is unavailable, then
IBMZSecurity will failover to the appropriate Sun provider.
.
This APAR will be fixed in the following Releases:
.
IBM Semeru Runtimes
 21 21.0.8.0
 17 17.0.16.0
.
Downloads and supplementary documentation can be found at the
following locations:
- For the z/OS operating system:
 - Java SDK Products on z/OS
 https://www.ibm.com/support/pages/java-sdk-products-zos



Temporary fix


    



Comments


    



APAR Information




    

  • APAR number
    PH67386
    • 

  • Reported component name
    JAVA Z/OS 64
    • 

  • Reported component ID
    620700104
    • 

  • Reported release
    L00
    • 

  • Status
    CLOSED PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2025-07-17
    • 

  • Closed date
    2025-07-18
    • 

  • Last modified date
    2025-07-22
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    JAVA Z/OS 64
    • 

  • Fixed component ID
    620700104
    • 



Applicable component levels







 
 
 
 

 [{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"L00","Line of Business":{"code":"LOB08","label":"Cognitive Systems"}}]
 

 

 
 
 

 

 

 

 

 

 
Document Information


 

 

 Modified date:
 

 22 July 2025