PM93877: SIT FILE IS IN USE WHEN USING ENCRYPTION AND KEYRING

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• You are seeing the PDSE data set which is the SYSIN containing
  your SIT member being kept OPEN after KEYRING and ENCRYPTION are
  specified in the SIT.
  You may see messages like:
  Access denied as the member in use.
  Member xxxxSIT - 0 records updated.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All.                                         *
  ****************************************************************
  * PROBLEM DESCRIPTION: A batch job with IBM File Manager       *
  *                      utility program FMNMAIN is run to       *
  *                      update a member of a PDSE dataset.      *
  *                      The job step ends RC=16 and the         *
  *                      following messages are issued:          *
  *                                                              *
  *                      FMNBE123                                *
  *                      Access denied as the member in use      *
  *                                                              *
  *                      FMNBB436                                *
  *                      Member XXXXXXX - 0 records updated      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  A batch job with IBM File Manager utility program FMNMAIN is run
  to update a member of a PDSE dataset.  The job step ends RC=16
  and the following messages are issued:
  
      FMNBE123 Access denied as the member in use
  
      FMNBB436 Member XXXXXXX - 0 records updated
  
  The PDSE dataset is allocated to a CICS TS region as SYSIN with
  a member containing DFHSIT parm overrides.
  
      //SYSIN DD DSN=PDSE.dataset.name(member),DISP=SHR
  
  The CICS region has been started with a KEYRING DFHSIT parameter
  specified and so the secure sockets layer (SSL) interface has
  been initialized.  Usually CICS TS would read the SYSIN dataset
  at start-up and then deallocate it but SSL initialization has
  caused the SYSIN dataset to remain allocated.
  
  If an attempt is made from another LPAR to update any member of
  a PDSE dataset it may fail because an update-in-place of a PDSE
  member cannot run if the PDSE is open cross-system, as
  documented in Technote T1010622.
  

Problem conclusion

• A change has been made to SSL initialization in CICS to close
  the SYSIN dataset.
  

Temporary fix

• FIX AVAILABLE BY PTF ONLY
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

  PM86595

• APAR is sysrouted TO one or more of the following:

  UK96899 UK96900

Modules/Macros

• DFHLEPT@
  

Fix information

• Fixed component name

  CICS TS Z/OS V5

• Fixed component ID

  5655Y0400

Applicable component levels

• R800 PSY UK96899

     UP13/08/30 P F308

• R803 PSY UK96900

     UP13/08/30 P F308

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.