RE: Cryptographic Access Provider

["Murphy, Mark" <MurphyM@xxxxxxxxxx>]

Not only locked down, but non-operational.  Makes a good boat anchor without 5722SS1, but not much
more.

-----Original Message-----
From: rpg400-l-bounces@xxxxxxxxxxxx [mailto:rpg400-l-bounces@xxxxxxxxxxxx] On Behalf Of Haas, Matt (CL
Tech Sv)
Sent: Monday, November 10, 2008 9:48 AM
To: RPG programming on the AS400 / iSeries
Subject: RE: Cryptographic Access Provider

You're right. The other way of looking at it is that once 5722SS1 is removed, the system is pretty
well locked down which removes the need to encrypting stuff.

Matt

-----Original Message-----
From: rpg400-l-bounces@xxxxxxxxxxxx [mailto:rpg400-l-bounces@xxxxxxxxxxxx] On Behalf Of Michael Ryan
Sent: Monday, November 10, 2008 9:32 AM
To: RPG programming on the AS400 / iSeries
Subject: Re: Cryptographic Access Provider

You only want to remove option 35 of 5722SS1, right? Removing the OS
would be a drag I think. :)

On Mon, Nov 10, 2008 at 8:56 AM, Haas, Matt (CL Tech Sv)
<matt.haas@xxxxxxxxxxx> wrote:
> You have an old version of the program. You need to remove 5722SS1 and install 5722AC3. Also, if you
are using SSL certificates for anything (like HTTP or FTP servers), make sure you export them and any
CA certificates you may have installed before doing anything. It's been a while since we went through
this but I think you'll have to create a new *SYSTEM key store and set up your SSL certificates again.
> Matt
>
> -----Original Message-----
> From: rpg400-l-bounces@xxxxxxxxxxxx [mailto:rpg400-l-bounces@xxxxxxxxxxxx] On Behalf Of
Prevesh.Kuni@xxxxxxxxxxxxxxxxx
> Sent: Monday, November 10, 2008 7:11 AM
> To: rpg400-l@xxxxxxxxxxxx
> Subject: Cryptographic Access Provider
> Importance: High
>
> Hi guys,
>
> I'm trying to use the Qc3EncryptData and Qc3DecryptData APIs, however I am
> getting the following error when running my program:
>
> Message ID . . . . . . :   CPF9DFF       Severity . . . . . . . :   40
> Message type . . . . . :   Escape
> Date sent  . . . . . . :   10/11/08      Time sent  . . . . . . : 13:28:48
>
>
> Message . . . . :   Request not allowed by cryptographic attributes.
> Cause . . . . . :   Export and import regulations restrict the use of
>  cryptographic function.  The iSeries cryptographic attributes are used
> to
>  indicate what cryptographic functions are permitted on the system.  The
>
>  requested operation is not allowed by the cryptographic attributes.
> Recovery  . . . :   To enable full cryptographic function, install
> licensed
>  program 5722-AC3, IBM Cryptographic Access Provider 128-bit for iSeries.
>
>
>
> When I 'go licpgm' this is what we have:
>
> 5722SS1    35      OS/400 - CCA Cryptographic Service Provider but the
> status says *COMPATIBLE and not *INSTALLED, also, we have just installed
> it today - does an IPL need to happen before the license pgm takes effect?
>
>
> Is there anything else I need to be looking at?
>
> Thanks
>
>
>
> Kind regards,
>
> Prevesh Kuni
> RPG Developer
> Business Systems Atlas Copco ASAP Southern Africa
> P.O. Box 14110
> Witfield
> 1467
> South Africa
>
> Phone: +27 (0)11 821 9000 - Phone dir.: +27 (0)11 821 9245 - Mobile: +27
> (0)83 679 8197 - Fax: +27 (0)11 821 9523
> E-mail:  prevesh.kuni@xxxxxxxxxxxxxxxxx
> Visit Atlas Copco at: www.atlascopco.com
> We are committed to your superior productivity through interaction and
> innovation
> --
> This is the RPG programming on the AS400 / iSeries (RPG400-L) mailing list
> To post a message email: RPG400-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
> or email: RPG400-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/rpg400-l.
>
> --
> This is the RPG programming on the AS400 / iSeries (RPG400-L) mailing list
> To post a message email: RPG400-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
> or email: RPG400-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/rpg400-l.
--
This is the RPG programming on the AS400 / iSeries (RPG400-L) mailing list
To post a message email: RPG400-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/rpg400-l
or email: RPG400-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/rpg400-l.