PI37543: PROVIDE CLIENT SIDE CERTIFICATION FOR CMCI

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• Provide client side certification for CMCI.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All CICSPlex SM V5R1M0 and V5R2M0 Users      *
  ****************************************************************
  * PROBLEM DESCRIPTION: A WUI region can automatically set up   *
  *                      and install the CICS TCPIPSERVICE and   *
  *                      URIMAP for the CICS Management Client   *
  *                      Interface (CMCI).                       *
  *                                                              *
  *                      The attributes for the CMCI             *
  *                      TCPIPSERVICE are derived from the WUI   *
  *                      parameters and the value of the SEC SIT *
  *                      parameter.  Although the CMCI is        *
  *                      capable of using the more advanced      *
  *                      security settings of the CICS           *
  *                      TCPIPSERVICE, it is unable to do so as  *
  *                      the WUI doesn't support those options.  *
  ****************************************************************
  * RECOMMENDATION: After applying the PTF that resolves this    *
  *                 APAR, all WUIs must be recycled to pick up   *
  *                 the new code.  Note that regions do not need *
  *                 to be brought down and restarted at the same *
  *                 time.                                        *
  ****************************************************************
  During WUI initialisation, the CICS TCP/IP service and URIMAP
  are constructed and installed into the WUI region. The WUI
  derives the attribute values for the CICS TCP/IP service based
  on the value of the CICS SEC startup initialisation parameter
  defined in the SIT and optional WUI parameters TCPIPSSL,
  TCPIPSSLCERT and TCPIPSSLCIPHERS.
  
  The WUI takes advantage of a limited set of the TCP/IP service
  capabilities and while it supports server-side SSL certificates
  it doesn't support client-side SSL certificates. As the CMCI
  derives it's own CICS TCP/IP service attributes from the WUI,
  this limits what the CMCI can easily use.
  
  The WUI has been updated to support additional optional
  parameters (CMCIAUTH and CMCISSL) that allow the WUI to supply
  directly the CMCI TCP/IP service AUTHENTICATE and SSL
  attributes.
  

Problem conclusion

Temporary fix

• FIX AVAILABLE BY PTF ONLY
  

Comments

• The following have been changed to support this change:
  
  - Module EYU0VSPM was updated to accept new parameters CMCIAUTH
    and CMCISSL.
  
  - Module EYU0VWXL was updated to process the new parameters as
    part of CMCI initialization. On failure to specify either both
    or none of the new parameters, this module also emits new
    EYULOG message EYUVS0214E to highlight the missing parameter.
    The text of the message will be similar to the following:
  
      EYUVS0214E CICS Management Client Interface CMCIAUTH|CMCISSL
                 parameter is missing. This is required when you
                 specify CMCISSL|CMCIAUTH.
  
  - EYUEVWXL, EYUKVWXL and EYUSVWXL were updated to define new
    message EYUVS0214E.
  
  - Module EYU0DVWI was updated to include the new parameters as
    part of the CPSM dump formatter output for the 'WUI' keyword.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI27797 UI27798 UI27799 UI27800

Modules/Macros

• EYUEVWXL EYUKVWXL EYUSVWXL EYUWUIIN EYU0DVWI
  EYU0VSPI EYU0VSPL EYU0VSPT EYU0VWXI EYU0VWXP EYU0VWXT
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R80M PSY UI27798

     UP15/05/22 P F505

• R800 PSY UI27797

     UP15/05/22 P F505

• R90M PSY UI27800

     UP15/05/22 P F505

• R900 PSY UI27799

     UP15/05/22 P F505

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.