RE: Cryptographic Access Provider -- RPG400-L

You're right. The other way of looking at it is that once 5722SS1 is removed, the system is pretty well locked down which removes the need to encrypting stuff.

Matt

-----Original Message-----
From: rpg400-l-bounces@xxxxxxxxxxxx [mailto:rpg400-l-bounces@xxxxxxxxxxxx] On Behalf Of Michael Ryan
Sent: Monday, November 10, 2008 9:32 AM
To: RPG programming on the AS400 / iSeries
Subject: Re: Cryptographic Access Provider

You only want to remove option 35 of 5722SS1, right? Removing the OS
would be a drag I think. :)

On Mon, Nov 10, 2008 at 8:56 AM, Haas, Matt (CL Tech Sv)
<matt.haas@xxxxxxxxxxx> wrote:

You have an old version of the program. You need to remove 5722SS1 and install 5722AC3. Also, if you are using SSL certificates for anything (like HTTP or FTP servers), make sure you export them and any CA certificates you may have installed before doing anything. It's been a while since we went through this but I think you'll have to create a new *SYSTEM key store and set up your SSL certificates again.

Matt

-----Original Message-----
From: rpg400-l-bounces@xxxxxxxxxxxx [mailto:rpg400-l-bounces@xxxxxxxxxxxx] On Behalf Of Prevesh.Kuni@xxxxxxxxxxxxxxxxx
Sent: Monday, November 10, 2008 7:11 AM
To: rpg400-l@xxxxxxxxxxxx
Subject: Cryptographic Access Provider
Importance: High

Hi guys,

I'm trying to use the Qc3EncryptData and Qc3DecryptData APIs, however I am
getting the following error when running my program:

Message ID . . . . . . : CPF9DFF Severity . . . . . . . : 40
Message type . . . . . : Escape
Date sent . . . . . . : 10/11/08 Time sent . . . . . . : 13:28:48

Message . . . . : Request not allowed by cryptographic attributes.
Cause . . . . . : Export and import regulations restrict the use of
cryptographic function. The iSeries cryptographic attributes are used
to
indicate what cryptographic functions are permitted on the system. The

requested operation is not allowed by the cryptographic attributes.
Recovery . . . : To enable full cryptographic function, install
licensed
program 5722-AC3, IBM Cryptographic Access Provider 128-bit for iSeries.

When I 'go licpgm' this is what we have:

5722SS1 35 OS/400 - CCA Cryptographic Service Provider but the
status says *COMPATIBLE and not *INSTALLED, also, we have just installed
it today - does an IPL need to happen before the license pgm takes effect?

Is there anything else I need to be looking at?

Thanks

Kind regards,

Prevesh Kuni
RPG Developer
Business Systems Atlas Copco ASAP Southern Africa
P.O. Box 14110
Witfield
1467
South Africa

Phone: +27 (0)11 821 9000 - Phone dir.: +27 (0)11 821 9245 - Mobile: +27
(0)83 679 8197 - Fax: +27 (0)11 821 9523
E-mail: prevesh.kuni@xxxxxxxxxxxxxxxxx
Visit Atlas Copco at: www.atlascopco.com
We are committed to your superior productivity through interaction and
innovation
--
This is the RPG programming on the AS400 / iSeries (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/rpg400-l.

--
This is the RPG programming on the AS400 / iSeries (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/rpg400-l.

--
This is the RPG programming on the AS400 / iSeries (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/rpg400-l.