Advanced Message Security (CSQ0...)

CSQ0101E

csect-name Internal message protection error, reason reason, diagnostics: value1,value2

Severity

Explanation

An internal error occurred during message protection processing.

System action

For a put operation, the message is rejected.

For a get operation, the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.

System programmer response

We should check that the message has valid IBM MQ headers, if not, contact the IBM support center.

CSQ0105E: csect-name Internal error occurred, reason reason, diagnostics: value
Severity: 8
Explanation: An internal error occurred during message protection processing.
System action: The message queue interface (MQI) call fails.
System programmer response: Contact the IBM support center.

CSQ0109E: csect-name SDUMP failed, return code rc, reason reason
Severity: 8
Explanation: An attempt to issue an SDUMP during abend processing failed.
System action: SDUMP diagnostics are not generated.
System programmer response: Review the return code and reason in conjunction with SDUMP documentation to resolve the problem.

CSQ0110I

csect-name AMS abend abend, reason reason

Severity

Explanation

An abend has occurred during message protection processing of type abend for reason reason.

System action

The message queue interface (MQI) call fails and the IBM MQ subsystem might terminate.

System programmer response

Use the abend and reason code information to resolve the issue.

If the problem cannot be resolved contact the IBM support center.

CSQ0111I: csect-name Module offset offset, level level
Severity: 0
Explanation: The module and level are reported for diagnostic purposes following an abend during message protection processing.
System action: Processing continues.
System programmer response: None.

CSQ0112I: csect-name PSW SDWAEC1, SDWAEC1, SDWAAEC1, SDWAAEC1
Severity: 0
Explanation: Relevant Program Status Word (PSW) fields are reported following an abend during message protection processing.
System action: Processing continues.
System programmer response: None.

CSQ0113I: csect-name CAB value1, value2, value3, value4
Severity: 0
Explanation: Relevant internal fields are reported following an abend during message protection processing.
System action: Processing continues.
System programmer response: None.

CSQ0114I: csect-name R0-R3 gpr0, gpr1, gpr2, gpr3
Severity: 0
Explanation: General purpose registers 0 through 3 are reported following an abend during message protection processing.
System action: Processing continues.
System programmer response: None.

CSQ0115I: csect-name R4-R7 gpr4, gpr5, gpr6, gpr7
Severity: 0
Explanation: General purpose registers 4 through 7 are reported following an abend during message protection processing.
System action: Processing continues.
System programmer response: None.

CSQ0116I: csect-name R8-R11 gpr8, gpr9, gpr10, gpr11
Severity: 0
Explanation: General purpose registers 8 through 11 are reported following an abend during message protection processing.
System action: Processing continues.
System programmer response: None.

CSQ0117I: csect-name R12-R15 gpr12, gpr13, gpr14, gpr15
Severity: 0
Explanation: General purpose registers 12 through 15 are reported following an abend during message protection processing.
System action: Processing continues.
System programmer response: None.

CSQ0118I: csect-name A0-A3 ar0, ar1, ar2, ar3
Severity: 0
Explanation: Access registers 0 through 3 are reported following an abend during message protection processing.
System action: Processing continues.
System programmer response: None.

CSQ0119I: csect-name A4-A7 ar4, ar5, ar6, ar7
Severity: 0
Explanation: Access registers 4 through 7 are reported following an abend during message protection processing.
System action: Processing continues.
System programmer response: None.

CSQ0120I: csect-name A8-A11 ar8, ar9, ar10, ar11
Severity: 0
Explanation: Access registers 8 through 11 are reported following an abend during message protection processing.
System action: Processing continues.
System programmer response: None.

CSQ0121I: csect-name A12-A15 ar12, ar13, ar14, ar15
Severity: 0
Explanation: Access registers 12 through 15 are reported following an abend during message protection processing.
System action: Processing continues.
System programmer response: None.

CSQ0137I: csect-name SDUMP not taken, suppressed by DAE
Severity: 0
Explanation: An SDUMP was suppressed due to Dump Analysis and Elimination (DAE).
System action: Processing continues.
System programmer response: None.

CSQ0151E: csect-name Failed to allocate storage
Severity: 8
Explanation: An attempt to allocate storage during message protection processing failed.
System action: The message queue interface (MQI) call fails.
System programmer response: Increase the amount of storage available.

CSQ0174E: csect-name Failed to load module module, return code abncode, reason rsncode
Severity: 8
Explanation: An attempt to load a module into storage failed.
System action: The IBM MQ subsystem fails to start.
System programmer response: Use the abend and reason code in conjunction with documentation for the LOAD macro to resolve the problem.

CSQ0175E: csect-name Failed to delete module module, return code rc
Severity: 8
Explanation: An attempt to delete a loaded module failed.
System action: The module remains loaded.
System programmer response: Use the return code in conjunction with documentation for the DELETE macro to resolve the problem.

CSQ0201E: csect-name Message table not available
Severity: 8
Explanation: An attempt to load the message protection component message file failed.
System action: The IBM MQ subsystem fails to start.
System programmer response: Verify that the IBM MQ subsystem has been installed correctly. If the problem persists contact the IBM support center.

CSQ0204I: csect-name AMS is using use-size MB of local storage, free-size MB free
Severity: 0
Explanation: The amount of storage currently used for message protection services is currently use-size MB, and a further free-size remains free.
System action: Processing continues.
System programmer response: None.

CSQ0209E

csect-name Message for qname sent to error queue, MQRC=mqrc (mqrc-text)

Severity

Explanation

During get processing a protected message on queue qname could not be processed for reason mqrc, and has been sent to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE (mqrc-text provides the MQRC in textual form).

System action

The message is placed on the error queue and an error is returned to the requesting application.

System programmer response

Examine the message on the error queue and the reason code to determine why the message could not be processed.

We should check the sender and receiver policies. For example, when setting the policy:

Specify the State or Province using ST=

The following special characters need escape characters:

   , (comma)   
     + (plus)   
     " (double quote)   
     \ (backslash)   
     < (less than)   
     > (greater than)   
     ; (semicolon)

If the Distinguished Name contains embedded blanks, we should enclose the DN in double quotation marks.

CSQ0210E

csect-name Failed to redirect message to error queue, MQRC=mqrc (mqrc-text)

Severity

Explanation

During get procesing, message protection processing failed for reason mqrc (mqrc-text provides the MQRC in textual form). An attempt to put the message to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE, failed.

System action

The get request fails and the message remains on the target queue.

System programmer response

Examine the message on the target queue and the reason code to determine why the message could not be processed or placed on the error queue.

Check the queue manager and Advanced Message Security task error logs for error messages relating to the failure to put the message to the error queue.

CSQ0213E: csect-name Internal queue close failed MQCC=mqcc MQRC=mqrc (mqrc-text)
Severity: 8
Explanation: During open processing for a protected queue protection initialization failed and an attempt to internally close the queue failed.
System action: The open request fails.
System programmer response: Examine the completion and reason codes to determine the cause of the failure.

CSQ0214E: csect-name Message protection initialization failed, return code rc, reason reason
Severity: 8
Explanation: During open processing for a protected queue protection initialization failed.
System action: The open request fails.
System programmer response: Examine the completion and reason codes to determine the cause of the failure. For more information, see Messages and codes in the z/OS Cryptographic Services System SSL Programming documentation.

CSQ0215E: csect-name Message protection failed, return code rc, reason reason
Severity: 8
Explanation: An attempt to protect a message failed during put processing.
System action: The message is not put to the queue.
System programmer response: Examine the completion and reason codes to determine the cause of the failure. For more information, see Messages and codes in the z/OS Cryptographic Services System SSL Programming documentation.

CSQ0216E: csect-name Message unprotection failed, return code rc, reason reason
Severity: 8
Explanation: An attempt to process a protected message during get processing failed.
System action: If the operation that failed was a destructive get, the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE, if possible.
System programmer response: Examine the completion and reason codes to determine the cause of the failure. For more information, see Messages and codes in the z/OS Cryptographic Services System SSL Programming documentation.

CSQ0217E: csect-name Failed to process object 'objname'
Severity: 8
Explanation: An attempt to initialize, protect, or process a protected message failed for the object named by objname.
System action: The open, get or put request fails.
System programmer response: Examine preceding or subsequent console messages for more information.

CSQ0218E: csect-name Privacy policy for qname invalid. No recipients
Severity: 8
Explanation: During open or put1 processing, a privacy policy was stipulated for the object qname, but the policy failed to identify any recipients.
System action: The open or put1 request fails.
System programmer response: Modify or delete the protection policy for the object qname.

CSQ0219E

csect-name Message verification error for qname

Severity

Explanation

During put or get processing an attempt to process a message failed due to unexpected header values or offsets.

System action

The put or get operation fails.

For get processing the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.

System programmer response

Examine the failing message to determine the cause of the problem.

CSQ0220E: csect-name Encryption strength not available
Severity: 8
Explanation: During get processing a protected message did not specify an encryption strength.
System action: The get request fails and the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.
System programmer response: Examine the message on the error queue to determine its origin and why it is not correctly protected.

CSQ0221E

csect-name Message encryption strength encstr not valid

Severity

Explanation

During get processing a protected message did not have a recognized encryption strength.

System action

The get request fails and the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.

System programmer response

Examine the message on the error queue to determine its origin and why it does not have a valid encryption strength.

Some encryption algorithms are supported on some platforms, however, not on others.

CSQ0222E

csect-name Message encryption strength encstr inconsistent with policy

Severity

Explanation

During get processing a protected message did not use an encryption algorithm that matches the expected encryption strength.

System action

The get request fails and the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.

System programmer response

Examine the message on the error queue to determine its origin and why the encryption algorithm does not match the expected encryption strength.

Some encryption algorithms are supported on some platforms, however, not on others.

CSQ0223E: csect-name Message size m-size inconsistent with header size h-size or original size o-size
Severity: 8
Explanation: During get processing a protected message was found to have a header or overall message size that did not match the original unprotected message.
System action: The get request fails and the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.
System programmer response: Examine the message on the error queue to determine why its lengths are inconsistent with the original unprotected message.

CSQ0224E: csect-name Message buffer length of m-size too small
Severity: 8
Explanation: During get processing a protected message was of insufficient length to contain a standard protection header and could not be processed.
System action: The get request fails and the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.
System programmer response: Examine the message on the error queue to determine why it is of insufficient length.

CSQ0225E: csect-name Message header not acceptable, structure identifier is 'strucid'
Severity: 8
Explanation: During get processing a protected message did not have the expected protection header eye-catcher, but instead had strucid.
System action: The get request fails and the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.
System programmer response: Examine the message on the error queue to determine why it has an invalid protection header.

CSQ0226E: csect-name Header version not supported
Severity: 8
Explanation: During get processing a protected message did not have the expected protection header version.
System action: The get request fails and the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.
System programmer response: Examine the message on the error queue to determine why it has an invalid protection header.

CSQ0227E: csect-name Message signature algorithm sig-alg not valid
Severity: 8
Explanation: During get processing a protected message did not have a recognized signature algorithm.
System action: The get request fails and the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.
System programmer response: Examine the message on the error queue to determine its origin and why it does not have a valid signature algorithm. Some signature algorithms are supported on some platforms, however, not on others.

CSQ0228E: csect-name Message signature algorithm sig-alg inconsistent with policy
Severity: 8
Explanation: During get processing a protected message did not use a signature algorithm that matches the expected signature strength.
System action: The get request fails and the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.
System programmer response: Examine the message on the error queue to determine its origin and why the signature algorithm does not match the expected signature strength. Some signature algorithms are supported on some platforms, however, not on others.

CSQ0229E: csect-name Unable to verify sender distinguished name
Severity: 8
Explanation: During get processing the distinguished name of the message sender was not present to be verified.
System action: The get request fails and the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.
System programmer response: Examine the message on the error queue to determine why it does not have a distinguished name for the sender of the message.

CSQ0230E: csect-name Structure identifier strucid invalid for format name format
Severity: 8
Explanation: During message protection processing a message header did not have the expected value for the message format indicated.
System action: The MQI call fails. For a get request the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.
System programmer response: Examine the failing message formats and headers to determine the cause of the problem.

CSQ0231E: csect-name Unrecognized version version for structure strucid, format name format
Severity: 8
Explanation: During message protection processing a message header version did not have the expected value for the message format and header indicated.
System action: The MQI call fails. For a get request the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.
System programmer response: Examine the failing message formats and headers to determine the cause of the problem.

CSQ0232E: csect-name Buffer length insufficient for format name format
Severity: 8
Explanation: During message protection processing a message length was insufficient to account for the length of a header indicated by the message format.
System action: The MQI call fails. For a get request the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.
System programmer response: Examine the failing message formats and headers to determine the cause of the problem.

CSQ0233E: csect-name Message msg-size of size does not match original size of orig-size
Severity: 8
Explanation: During get processing a protected message length does not resolve to the original length of the message before it was protected.
System action: The get request fails and the message is moved to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE.
System programmer response: Examine the message on the error queue to determine why it has a different length than expected.

CSQ0234I

csect-name Policy for queue-name not defined, message protection will not be removed

Severity

Explanation

SPLPROT(REMOVE) was specified on a channel with CHLTYPE SDR or SVR, but an AMS policy has not been defined for the transmission queue.

The channel will start up, but protection will not be removed from messages retrieved from the transmission queue.

System action

Processing continues.

System programmer response

If message protection is to be removed, define an AMS policy for the transmission queue, refresh AMS policies, and stop and restart the channel.

CSQ0240E: csect-name No storage for error queue processing for qname
Severity: 8
Explanation: During get processing a message that failed protection processing could not be put to the error queue, SYSTEM.PROTECTION.ERROR.QUEUE, due to insufficient storage.
System action: The get request fails and the message remains on the queue qname.
System programmer response: Determine the cause of storage shortage and retry the get operation.

CSQ0400I: CSQ0UTIL IBM MQ AMS for z/OS vrm
Severity: 0
Explanation: The Advanced Message Security policy utility, CSQ0UTIL, is starting for utility version v, release r, and modlevel m.
System action: Processing continues.
System programmer response: None.

CSQ0401I: Queue Manager Protection Policy Utility
Severity: 0
Explanation: The Advanced Message Security policy utility, CSQ0UTIL, has started.
System action: Processing continues.
System programmer response: None.

CSQ0402I: Command Name: command
Severity: 0
Explanation: The Advanced Message Security policy utility is processing the policy command command.
System action: Processing continues.
System programmer response: None.

CSQ0403I: Arguments: args
Severity: 0
Explanation: The Advanced Message Security policy utility is processing arguments args for the current policy command.
System action: Processing continues.
System programmer response: None.

CSQ0404E: Insufficient storage available to perform command
Severity: 8
Explanation: The Advanced Message Security policy utility could not allocate storage to process the input command.
System action: The Advanced Message Security policy utility terminates without executing the current input command.
System programmer response: Determine why there is insufficient storage for the policy utility then rerun the utility when the problem has been resolved.

CSQ0405E: An error occurred running command cmd-number on line line number
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an error during the processing of command cmd-number at line line-number of the input.
System action: The Advanced Message Security policy utility processing fails for the command identified by cmd-number at line line-number.
System programmer response: Examine the failing command and related messages to determine the cause of the failure.

CSQ0406E: Invalid command found on line line-number. Valid commands are SETMQSPL and DSPMQSPL
Severity: 8
Explanation: The Advanced Message Security policy utility did not recognize the input command at line line-number of the input.
System action: The Advanced Message Security policy utility does not process the command at line line-number.
System programmer response: Change the input command to either SETMQSPL or DSPMQSPL.

CSQ0407E: Quoted string on line line-number does not have a terminating quote
Severity: 8
Explanation: The Advanced Message Security policy utility could not align matching quotes when processing the input command at line line-number.
System action: The Advanced Message Security policy utility does not process the command at line line-number.
System programmer response: Change the command at line line-number to use consistent and matching quotes in the arguments.

CSQ0408I: cmd-count policy commands have been completed successfully
Severity: 0
Explanation: The Advanced Message Security policy utility has successfully processed cmd-count commands.
System action: Processing continues.
System programmer response: None.

CSQ0409I: Reached end of input, num-line lines read
Severity: 0
Explanation: The Advanced Message Security policy utility reached end of input after num-line lines.
System action: Processing continues.
System programmer response: None.

CSQ0410E: Error opening SYSIN data set
Severity: 8
Explanation: The Advanced Message Security policy utility could not open the standard input (SYSIN DD) to read input commands.
System action: No commands are processed.
System programmer response: Determine why the SYSIN DD is unavailable and resolve the problem, then rerun the policy utility.

CSQ0411E: Unexpected internal error
Severity: 8
Explanation: The Advanced Message Security policy utility did not recognize the input command.
System action: The input command is not processed.
System programmer response: Examine the command input and verify that the input expresses a valid command with valid parameters.

CSQ0412I: Policy name: policy-name
Severity: 0
Explanation: The Advanced Message Security policy utility is displaying information about the policy identified by policy-name.
System action: Processing continues.
System programmer response: None.

CSQ0413I: Encryption algorithm: enc-alg
Severity: 0
Explanation: The Advanced Message Security policy utility is displaying the encryption algorithm enc-alg for a given policy.
System action: Processing continues.
System programmer response: None.

CSQ0414I: Recipient DNs: recipient-dns
Severity: 0
Explanation: The Advanced Message Security policy utility is displaying the recipient distinguished names, recipient-dns, for a given policy.
System action: Processing continues.
System programmer response: None.

CSQ0415I: Signature algorithm: sig-alg
Severity: 0
Explanation: The Advanced Message Security policy utility is displaying the signature algorithm, sig-alg, for a given policy.
System action: Processing continues.
System programmer response: None.

CSQ0416I: Signer DNs: signer-dns
Severity: 0
Explanation: The Advanced Message Security policy utility is displaying the signer distinguished names, signer-dns, for a given policy.
System action: Processing continues.
System programmer response: None.

CSQ0417I: Quality of protection: qop
Severity: 0
Explanation: The Advanced Message Security policy utility is displaying the quality of protection, qop, for a given policy.
System action: Processing continues.
System programmer response: None.

CSQ0418I: Toleration: toleration-flag
Severity: 0
Explanation: The Advanced Message Security policy utility is displaying the toleration flag, toleration-flag, for a given policy.
System action: Processing continues.
System programmer response: None.

CSQ0447E: Failed to open EXPORT DD, exporting to STDOUT
Severity: 8
Explanation: The Advanced Message Security policy utility could not open the EXPORT DD to process a -export request.
System action: The policy export is sent to STDOUT.
System programmer response: Determine why the EXPORT DD is unavailable and resolve the problem, then rerun the policy utility.

CSQ0448E: Command failed
Severity: 8
Explanation: The Advanced Message Security policy utility failed to successfully process an input command.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Determine the reason for the failing command by examining related messages, and correct the failing input command.

CSQ0449I: Command successful
Severity: 0
Explanation: The Advanced Message Security policy utility successfully processed an input command.
System action: Processing continues.
System programmer response: None.

CSQ0450E: Syntax error. Usage: setmqspl -m (qm) -p (policy) -s (sigalg) -a (signer DN) -e (encalg) -r (receiver DN)
Severity: 8
Explanation: The Advanced Message Security policy utility failed to interpret a command due to bad command syntax.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Correct the syntax of the failing command then retry.

CSQ0451E: Invalid queue manager name: qmgr-name
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an invalid queue manager name value, qmgr-name, when processing an input command.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Correct the queue manager name value in the input command then retry.

CSQ0452E: Invalid policy name: policy-name
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an invalid policy name when processing an input command.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Correct the policy name value in the input command then retry.

CSQ0453E: Invalid encryption algorithm
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an invalid encryption algorithm when processing an input command.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Correct the encryption algorithm value in the input command then retry.

CSQ0454E: Invalid signature algorithm
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an invalid signature algorithm when processing an input command.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Correct the signature algorithm value in the input command and retry.

CSQ0455E: Encryption requires the use of a signature algorithm
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an invalid command that identified an encryption algorithm, but did not also identify a valid signature algorithm.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Provide both a valid encryption algorithm and a valid signature algorithm when defining privacy protection policies.

CSQ0456E: Encryption requires a receiver DN to be specified (-r)
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an invalid command that identified an encryption algorithm, but did not also identify at least one recipient DN via the -r parameter.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Provide both an encryption algorithm and at least one recipient DN when defining privacy protection policies.

CSQ0457E: Invalid receiver DN specified: receiver-dn
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an invalid receiver distinguished name, receiver-dn, when processing an input command.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Correct the receiver distinguished name in the input command then retry.

CSQ0458E: Receiver DN is specified while no encryption is enabled
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an invalid command that identified at least one recipient DN, however, did not also identify an encryption algorithm when processing the -e parameter.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Provide both an encryption algorithm and at least one recipient DN when defining privacy protection policies.

CSQ0459E: Invalid signer DN specified: signer-dn
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an invalid signer distinguished name, signer-dn, when processing an input command.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Correct the signer distinguished name value in the input command then retry.

CSQ0460E: Signer DN is specified while no signing is enabled
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an invalid command that identified at least one signer DN using the -a parameter, however, did not also identify a signature algorithm using the -s parameter.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Provide both an encryption algorithm and at least one recipient DN when defining privacy protection policies.

CSQ0461E: Queue SYSTEM.PROTECTION.POLICY.QUEUE unavailable, MQCC=mqcc MQRC=mqrc (mqrc-text)
Severity: 8
Explanation: The Advanced Message Security policy utility could not open the policy queue, SYSTEM.PROTECTION.POLICY.QUEUE, due to an error identified by mqcc and mqrc (mqrc-text provides the MQRC in textual form).
System action: Processing ends.
System programmer response: Determine the reason the policy queue is unavailable using the mqcc and mqrc, then resolve the problem.

CSQ0462E: Failed to retrieve protection policy, MQCC=mqcc MQRC=mqrc (mqrc-text)
Severity: 8
Explanation: The Advanced Message Security policy utility could not retrieve a policy from the policy queue, SYSTEM.PROTECTION.POLICY.QUEUE, due to an error identified by mqcc and mqrc (mqrc-text provides the MQRC in textual form).
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Determine the reason the policy could not be retrieved from the policy queue, then resolve the problem.

CSQ0463E: Policy update failed due to concurrent update, MQCC=mqcc MQRC=mqrc (mqrc-text)
Severity: 8
Explanation: The Advanced Message Security policy utility detected that a policy was changed by another process when it was trying to update or create the same policy, due to an error identified by mqcc and mqrc (mqrc-text provides the MQRC in textual form).
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Verify the policy is correct, then update the policy again if necessary.

CSQ0464E: Policy definition not found, MQCC=mqcc MQRC=mqrc (mqrc-text)
Severity: 8
Explanation: The Advanced Message Security policy utility could not find a policy on the policy queue, SYSTEM.PROTECTION.POLICY.QUEUE, when a policy was expected, due to an error identified by mqcc and mqrc (mqrc-text provides the MQRC in textual form).
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Determine the reason the policy could not be retrieved from the policy queue, then resolve the problem.

CSQ0465E: An unexpected error occurred, MQCC=mqcc MQRC=mqrc (mqrc-text)
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an unexpected MQI error when processing an input command, identified by mqcc and mqrc (mqrc-text provides the MQRC in textual form).
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Determine the reason the for the MQI error, then resolve the problem.

CSQ0466E: Invalid value specified for toleration flag, specify one of (0, 1)
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an invalid value for the toleration parameter.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Use a value of 0 (false) or 1 (true) for the toleration parameter when creating or modifying a policy.

CSQ0467E: Failed to connect to the queue manager, MQCC=mqcc MQRC=mqrc (mqrc-text)
Severity: 8
Explanation: The Advanced Message Security policy utility could not connect to the input queue manager to process further input commands, due to an error identified by mqcc and mqrc (mqrc-text provides the MQRC in textual form).
System action: Processing ends.
System programmer response: Determine the reason the queue manager is unavailable, then resolve the problem.

CSQ0468I: No policies found
Severity: 0
Explanation: The Advanced Message Security policy utility found no policies matching the specified parameters.
System action: Processing continues.
System programmer response: None.

CSQ0469E: Invalid value specified for key reuse argument
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an invalid value for the key reuse parameter.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Use a valid value for the key reuse parameter when creating or modifying a policy.

CSQ0470E: Syntax error. Usage: dspmqspl -m (qm) -p (policy) -export
Severity: 8
Explanation: The Advanced Message Security policy utility failed to interpret a command due to incorrect syntax.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Correct the syntax of the failing command then retry.

CSQ0471E: Key reuse not valid for policy
Severity: 8
Explanation: The Advanced Message Security policy utility encountered an invalid command that specified a non-zero value for the key reuse parameter for a policy that does not allow symmetric key reuse.
System action: The current command is not processed and the Advanced Message Security policy utility attempts to process the next input command, if any.
System programmer response: Either specify a value of 0 for the key reuse parameter (key reuse disabled), or change the policy to use a quality of protection that allows symmetric key reuse, for example, confidentiality.

CSQ0499I: CSQ0UTIL Utility completed return code=retcode
Severity: 0
Explanation: The Advanced Message Security policy utility, CSQ0UTIL, has completed with return code retcode.
System action: Processing continues.
System programmer response: If the utility did not complete successfully refer to other messages in the output to determine the cause of any errors.

CSQ0501I: csect-name SMF recording enabled for record type record-type
Severity: 0
Explanation: Advanced Message Security has enabled SMF record generation for record type record-type.
System action: Processing continues.
System programmer response: None.

CSQ0502I: csect-name SMF recording disabled
Severity: 0
Explanation: Advanced Message Security has disabled SMF record generation.
System action: Processing continues.
System programmer response: None.

CSQ0503I: csect-name SMF record write failed, return code retcode
Severity: 8
Explanation: An attempt the generate an SMF audit record using SMFEWTM failed during message protection processing with return code retcode.
System action: The SMF record is not generated.
System programmer response: Examine the retcode and documentation for the SMFEWTM macro to determine the cause of the failure.

CSQ0600I: csect-name IBM MQ AMS for z/OS, version, service-level
Severity: 0
Explanation: The Advanced Message Security task is running at version version and service level service-level.
System action: Processing continues.
System programmer response: None.

CSQ0601I: csect-name Environment variable varname has an invalid value, using default 'value'
Severity: 8
Explanation: A Advanced Message Security environment variable, varname, was set to an invalid value, resulting in the use of a default value, value, for the variable.
System action: Processing continues with the default value for the named environment variable.
System programmer response: Change the environment variable assignment to a valid value if the default is not acceptable.

CSQ0602I: csect-name AMS initialization complete
Severity: 0
Explanation: The Advanced Message Security task initialization is complete.
System action: Processing continues.
System programmer response: None.

CSQ0603I: csect-name AMS shutdown requested
Severity: 0
Explanation: The Advanced Message Security task has received a shutdown request.
System action: Processing continues.
System programmer response: None.

CSQ0604I: csect-name LOG option processed: log-option
Severity: 0
Explanation: The Advanced Message Security task processed a LOG command for log option log-option.
System action: Processing continues with the new log option.
System programmer response: None.

CSQ0605E: csect-name Incorrect LOG option specified
Severity: 8
Explanation: An attempt by the Advanced Message Security task to process a LOG command failed due to an invalid log option.
System action: The LOG command does not take effect.
System programmer response: Correct the LOG option and retry the LOG command.

CSQ0606E

csect-name Unrecognized command: specify DISPLAY, REFRESH, LOG, SMFTYPE, SMFAUDIT or STOP

Severity

Explanation

An attempt by the Advanced Message Security task to process a command failed because the command was not recognized.

System action

The command is not executed.

System programmer response

Select a valid command and retry.

Valid commands include DISPLAY, REFRESH, LOG, SMFTYPE, SMFAUDIT and STOP.

CSQ0607E: csect-name Insufficient storage available
Severity: 8
Explanation: The Advanced Message Security task failed to allocate storage.
System action: The function being performed by the Advanced Message Security task fails.
System programmer response: Determine the reason there is insufficient storage and correct or increase, as appropriate.

CSQ0608E

csect-name Failed to load policy configuration, MQRC=mqrc (mqrc-text)

Severity

Explanation

The Advanced Message Security task failed to load the policy configuration for reason mqrc (mqrc-text provides the MQRC in textual form).

System action

The Advanced Message Security task cannot start.

System programmer response

Use the reason code, mqrc, to determine why the policy configuration could not be loaded from the policy queue, SYSTEM.PROTECTION.POLICY.QUEUE.

If the queue manager cannot start, we can define the queue in the CSQINP2 concatenation. Definitions for queues required by Advanced Message Security are provided in SCSQPROC member CSQ4INSM.

CSQ0609I: csect-name AMS for z/OS starting, version version, level service-level
Severity: 0
Explanation: Advanced Message Security task has started for product version version and service level service-level.
System action: Processing continues.
System programmer response: None.

CSQ0610E: csect-name Failed to start policy subtask, error errcode, reason reason
Severity: 8
Explanation: An attempt by the Advanced Message Security task to start the policy configuration subtask failed with errno errcode and errno2 reason.
System action: The Advanced Message Security task cannot start.
System programmer response: Use the error and reason codes to determine why the policy configuration subtask could not be started, then take corrective action.

CSQ0611E: csect-name Failed to make AMS address space non-swapable, error errcode
Severity: 8
Explanation: An attempt by the Advanced Message Security task to make itself non-swapable failed with error code errcode.
System action: The Advanced Message Security task cannot start.
System programmer response: The error identified by errcode is likely to be the return code from the SYSEVENT macro. Use macro documentation to determine the cause of the SYSEVENT failure.

CSQ0612E: csect-name System function 'function' failed
Severity: 8
Explanation: An attempt by the Advanced Message Security task to use a run-time call, function, failed.
System action: The Advanced Message Security task cannot continue to process the service it was providing at the time of the failure.
System programmer response: This message is associated with other messages that are generated at the time of failure. Examine these messages for more information, including error codes that might identify the cause of the failure.

CSQ0613E: csect-name AMS initialization error errno, reason errno2
Severity: 8
Explanation: The Advanced Message Security task failed to initialize due to a run-time call failure.
System action: The Advanced Message Security task cannot start.
System programmer response: This message is associated with other messages that are generated at the time of failure. Examine these messages for more information, and use the error codes to determine the cause of the failure.

CSQ0614E: csect-name AMS termination error errno, reason reason
Severity: 8
Explanation: The Advanced Message Security task failed during termination due to a run-time call failure.
System action: The Advanced Message Security task termination continues.
System programmer response: This message is associated with other messages that are generated at the time of failure. Examine these messages for more information, and use the error codes to determine the cause of the failure.

CSQ0615E: csect-name AMS post/wait request failed, reason reason
Severity: 8
Explanation: An attempt by the Advanced Message Security task to issue a post or wait request failed for reason reason.
System action: The Advanced Message Security task cannot continue to process the service it was providing at the time of the failure.
System programmer response: The error identified by reason is likely to be the return code from the POST or WAIT macro. Use macro documentation to determine the cause of the failure.

CSQ0616E: csect-name AMS runtime environment initialization failed
Severity: 8
Explanation: The Advanced Message Security task failed to initialize.
System action: The Advanced Message Security task cannot start.
System programmer response: Examine associated messages for more information about the failure, then take corrective action.

CSQ0617E: csect-name AMS already active
Severity: 8
Explanation: An attempt to start the Advanced Message Security task failed because it was already running.
System action: The Advanced Message Security task cannot start while it is already running.
System programmer response: None.

CSQ0618E: csect-name AMS initialization failed, program not APF authorized
Severity: 8
Explanation: An attempt to start the Advanced Message Security task failed because the module, CSQ0DSRV, is not APF authorized.
System action: The Advanced Message Security task cannot start.
System programmer response: Ensure that the AMS task module is APF authorized and retry.

CSQ0619I

csect-name AMSPROD=prod-value, recording product usage for product-name product ID product-id

Explanation

This message is issued when AMS starts, and if SMF 89 product usage records are to be recorded by AMS:

prod-value is the value defined for AMSPROD, and is allowed to be blank ( see START QMGR for information on how to set prod-value.
product-name is the descriptive name of the product
product-id is the product ID that is to be used in the SMF 89 data

For example:

AMSPROD=AMS, recording product usage for IBM MQ for z/OS AMS product ID 5655-AM9 - this indicates that usage data will be collected for the IBM MQ for z/OS AMS product.
AMSPROD=ADVANCEDVUE, recording product usage for IBM MQ Advanced for z/OS Value Unit Edition product ID 5655-AV1 - this indicates that usage data is to be collected for the IBM MQ Advanced for z/OS Value Unit Edition product.

See z/OS MVS Product Management for more information on product usage recording.

CSQ0624E: csect-name SMF audit option invalid, defaulting to 'failure'
Severity: 8
Explanation: An attempt to process the _AMS_SMF_AUDIT environment variable or an SMFAUDIT command failed because the variable or command value was not recognized.
System action: The variable assignment or command is ignored and the default value 'failure' is used.
System programmer response: Provide a valid variable or command value. Valid values include 'success', 'failure', and 'all'.

CSQ0625E: csect-name SMF record type invalid
Severity: 8
Explanation: An attempt to process the _AMS_SMF_TYPE environment variable or an SMFTYPE command failed because the variable or command value was not valid.
System action: The variable assignment or command is ignored.
System programmer response: Provide a valid variable or command value. Valid values include numeric values between 0 and 255 inclusive. The SMFTYPE value represents the SMF record type for SMF record generation. A value of 0 means no SMF record generation is required. The recommended value is 180.

CSQ0626I: csect-name SMF audit type is audit-type
Severity: 0
Explanation: The Advanced Message Security SMF audit type has been set to audit-type.
System action: The new SMF audit type takes effect immediately. If audit-type is 'failure', all failing puts/gets to a protected queue are audited. If audit-type is 'success', all successful puts/gets to a protected queue are audited. If audit-type is 'all', both successful and failing puts/gets to a protected queue are audited.
System programmer response: None.

CSQ0629E: csect-name Unable to create security environment for user 'userid', reason errno
Severity: 8
Explanation: An attempt by the Advanced Message Security task to create a thread-level security environment using pthread_security_np() for user userid failed for the reasons indicated by errno and errno2.
System action: The thread-level security environment is not created, and the AMS function being processed cannot be completed. The MQI call fails.
System programmer response: Examine the errno and errno2 values in conjunction with pthread_security_np() documentation to determine the cause of the failure.

CSQ0630E: csect-name Unable to delete security environment, reason errno
Severity: 8
Explanation: An attempt by the Advanced Message Security task to delete a thread-level security environment using pthread_security_np() failed for the reason indicated by errno.
System action: The thread-level security environment is not deleted. AMS processing continues.
System programmer response: Examine the errno value in conjunction with pthread_security_np() documentation to determine the cause of the failure.

CSQ0631E: csect-name AMS not started, product is not enabled
Severity: 8
Explanation: An attempt by the Advanced Message Security task to register itself using macro IFAEDREG failed.
System action: The Advanced Message Security task cannot start.
System programmer response: Verify that the PARMLIB IFAPRDxx member has been built with the provided AMS product information, then retry.

CSQ0632E: csect-name AMS deregistration failed, reason reason
Severity: 8
Explanation: An attempt by the Advanced Message Security task to deregister itself using macro IFAEDDRG failed.
System action: The Advanced Message Security task cannot deregister. Processing continues.
System programmer response: Examine the reason returned by the IFAEDDRG macro in conjunction with macro documentation to determine the cause of the failure.

CSQ0633I: csect-name AMS environment variable values:
Severity: 0
Explanation: The Advanced Message Security task identifies its environment variables and their values immediately following this message.
System action: Processing continues.
System programmer response: None.

CSQ0634I: csect-namevariable=value
Severity: 0
Explanation: During startup, the Advanced Message Security task issues this message to report an environment variable variable, and its value value.
System action: Processing continues.
System programmer response: None.

CSQ0635I: csect-name POLICY refresh complete
Severity: 0
Explanation: The Advanced Message Security task has refreshed its policy configuration in response to a REFRESH command.
System action: Processing continues.
System programmer response: None.

CSQ0636I: csect-name POLICY refresh failed
Severity: 8
Explanation: An attempt by the Advanced Message Security task to refresh its policy configuration failed.
System action: The policy configuration is not refreshed.
System programmer response: Examine the console for associated error messages to determine the cause of the failure.

CSQ0637I: csect-name KEYRING refresh complete
Severity: 0
Explanation: The Advanced Message Security task has refreshed its keyring configuration in response to a REFRESH command.
System action: Processing continues.
System programmer response: None.

CSQ0638E: csect-name KEYRING refresh failed, return code errno
Severity: 8
Explanation: An attempt by the Advanced Message Security task to refresh its keyring configuration failed for the reason indicated by errno.
System action: The keyring configuration is not refreshed.
System programmer response: Examine the console for associated error message to determine the cause of the failure. Use the errno, which might represent a System SSL gsk_status to further diagnose the problem.

CSQ0639E: csect-name Incorrect REFRESH option, specify KEYRING, POLICY or ALL
Severity: 8
Explanation: An attempt by the Advanced Message Security task to process a REFRESH command failed because the refresh option was not recognized.
System action: The REFRESH command is not processed.
System programmer response: Ensure the REFRESH option is KEYRING, POLICY or ALL, depending on which option should be refreshed.

CSQ0640E: csect-name AMS not started correctly
Severity: 8
Explanation: The Advanced Message Security task has started incorrectly.
System action: The Advanced Message Security task fails to start.
System programmer response: The Advanced Message Security task can only be started internally by IBM MQ.

CSQ0641I: csect-name REFRESH command completed successfully
Severity: 0
Explanation: The Advanced Message Security task has successfully processed a REFRESH command.
System action: Processing continues.
System programmer response: None.

CSQ0642I: csect-nameREFRESH command failed
Severity: 8
Explanation: The Advanced Message Security task has failed to successfully process a REFRESH command.
System action: The requested REFRESH command is not processed.
System programmer response: Examine the console for associated error messages to determine the cause of the problem.

CSQ0648E: csect-name Failed to open AMS key ring, reason gsk-status
Severity: 8
Explanation: An attempt by the Advanced Message Security task to open its keyring failed for the reason indicated by gsk-status.
System action: The AMS keyring is not opened, and the AMS task cannot start.
System programmer response: Examine System SSL documentation related to the gsk_open_keyring() call in conjunction with the gsk-status code to determine the cause of the failure.

CSQ0649E: csect-name CRL initialization failed
Severity: 8
Explanation: An attempt by the Advanced Message Security task to connect to an LDAP server, based on configuration provided in the CRLFILE DD, failed.
System action: The Advanced Message Security task cannot perform Certificate Revocation List (CRL) checking. The behavior of certificate validation is determined by the System SSL environment variable GSK_CRL_SECURITY_LEVEL. See System SSL documentation for more information.
System programmer response: Check the configuration provided via the CRLFILE DD in the AMS started task JCL and verify that the configuration details are correct.

CSQ0651E: csect-name Failed to open CRL LDAP, ldap-name
Severity: 8
Explanation: An attempt by the Advanced Message Security task to open an LDAP directory, ldap-name, failed.
System action: The Advanced Message Security task cannot perform Certificate Revocation List (CRL) checking against the named LDAP directory. The behavior of certificate validation is determined by the System SSL environment variable GSK_CRL_SECURITY_LEVEL. See System SSL documentation for more information.
System programmer response: Check the configuration provided in the CRLFILE DD in the AMS started task JCL and verify that the configuration details are correct. Verify that the failing directory is available.

CSQ0652I: csect-name CRL checking enabled
Severity: 0
Explanation: The Advanced Message Security task has successfully enabled Certificate Revocation List (CRL) checking.
System action: Processing continues.
System programmer response: None.

CSQ0653I: csect-name CRL checking disabled
Severity: 0
Explanation: The Advanced Message Security task has successfully disabled Certificate Revocation List (CRL) checking.
System action: Processing continues.
System programmer response: None.

CSQ0660E: csect-name Internal version mismatch
Severity: 8
Explanation: The Advanced Message Security task has received a request for data protection services with an unrecognized request version value.
System action: The data protection service cannot be provided.
System programmer response: This error implies that a task other than the Advanced Message Security Interceptor is attempting to exploit AMS data protection services. AMS data protection services are only available by using the AMS Interceptor.

CSQ0699I: csect-name AMS shutdown complete
Severity: 0
Explanation: The Advanced Message Security task has shutdown.
System action: Processing continues.
System programmer response: None.

CSQ0996I: csect-name char-diag1, char-diag2, char-diag3, char-diag4, hex-diag1, hex-diag2
Severity: 0
Explanation: This message is generated when Advanced Message Security is running in DEBUG mode, as directed by IBM support center, and provides character and hexadecimal diagnostic values to aid in problem resolution.
System action: Processing continues.
System programmer response: None.

CSQ0997I: csect-name char-diag1, char-diag2, char-diag3, hex-diag1, hex-diag2, hex-diag3
Severity: 0
Explanation: This message is generated when Advanced Message Security is running in DEBUG mode, as directed by IBM support center, and provides character and hexadecimal diagnostic values to aid in problem resolution.
System action: Processing continues.
System programmer response: None.

CSQ0998I: csect-name char-diag1, char-diag2, hex-diag1, hex-diag2, hex-diag3, hex-diag4
Severity: 0
Explanation: This message is generated when Advanced Message Security is running in DEBUG mode, as directed by IBM support center, and provides character and hexadecimal diagnostic values to aid in problem resolution.
System action: Processing continues.
System programmer response: None.

CSQ0999I: csect-name char-diag1, hex-diag1, hex-diag2, hex-diag3, hex-diag4, hex-diag5
Severity: 0
Explanation: This message is generated when Advanced Message Security is running in DEBUG mode, as directed by IBM support center, and provides character and hexadecimal diagnostic values to aid in problem resolution.
System action: Processing continues.
System programmer response: None.

Parent topic: Messages for IBM MQ for z/OS