Go to Home Page
Questions?
Call 1-800-572-5517
 
  Go to Home Page  
  See all products
  See price schedules
  See manuals, tutorials, articles
  Download a free 30-day trial
  See user testimonials
  About Pacific Systems Group
 
 
SMF Tools
  See SMF Record Layouts
  See Sample SMF Reports
  Learn How to Export SMF Data
  Download Free SMF Reporting Software (30 days)
 
One of the greatest SMF record parsing programming languages I've ever seen. Chief, Large Systems Services Branch, NIH
  Choose Spectrum Writer to add 4GL to your product
  Free 60-Page Book (PDF) - How to Make an SMF Report
Spectrum DCOLLECT Reporter - the 4GL DCOLLECT Report Writer.

Spectrum SMF Writer - the 4GL SMF Report Writer.

SMF Type 82 Record

This table shows the record layout for type 82 SMF records
(z/OS 2.4 Cryptographic Services ICSF Record).

List of other SMF record layouts available.
List of sample SMF reports.

Purpose: Record type 82 is used to record information about the events and operations of the Integrated Cryptographic Service Facility (ICSF) program product. Record type 82 is written to the SMF data set at the completion of certain cryptographic functions:

  • Subtype 1 — is written whenever ICSF is started or the options refresh is performed.
  • Subtype 7 — is written when an operational key is imported from a coprocessor.
  • Subtype 8 — is written whenever the in-storage copy of the CKDS is refreshed.
  • Subtype 9 — is written whenever the CKDS is updated by a dynamic CKDS update service or the KDS Metadata write service or the CKDS KEYS utility.
  • Subtype 13 — is written whenever the PKDS is updated by a dynamic PKDS update service or the KDS Metadata write service or the PKDS KEYS utility.
  • Subtype 14 — is written when a clear master key part is entered on a cryptographic coprocessor.
  • Subtype 15 — is written whenever a retained key is created or deleted.
  • Subtype 16 — is written for each request and reply from calls to the CSFPCI service by TKE.
  • Subtype 18 — is written when the configuration of a coprocessor or accelerator changes.
  • Subtype 19 — is written periodically to record processing times for PCIXCC coprocessors.
  • Subtype 20 — is written periodically to record processing times for coprocessors or accelerators.
  • Subtype 21 — is written when ICSF issues IXCJOIN to join the ICSF sysplex group or issues IXCLEAVE to leave the sysplex group.
  • Subtype 22 — is written when the Trusted Block Create Callable services are invoked.
  • Subtype 23 — is written when the token data set (TKDS) is updated
  • Subtype 24 — is written when duplicate tokens are found.
  • Subtype 25 — is written when key store policy checking detects the unauthorized use of a key token.
  • Subtype 26 — is written whenever the in-storage copy of the PKDS is refreshed.
  • Subtype 27 — is written when key store policy PKA key extensions checking detects the unauthorized use of a key.
  • Subtype 28 — is written for information about High Performance Encrypted Key.
  • Subtype 29 — is written for each TKE workstation audit record received from a TKE workstation.
  • Subtype 30 — is written for each time an archived or inactive key data set record is referenced.
  • Subtype 31 — is written for cryptographic statistics data.

It's easy to report on SMF 82 data!

SMF Spectrum Writer
We have a low-cost 4GL report writer especially for SMF files. It's called Spectrum SMF Writer.

Spectrum SMF Writer handles the difficult SMF record parsing for you automatically. You just specify which fields you want to see.

Spectrum SMF Writer also converts the arcane date and time fields and reformats them into an attractive report.

Plus, Spectrum SMF Writer can export SMF data as comma delimited files to use on your PC.
 
Try It FREE Now!

SMF Type 82 Record -- z/OS 2.4 Cryptographic Services ICSF Record
Offset
(Dec.)		Offset
(Hex)		NameLengthFormatDescription
00SMF82LEN2Binary
Record length.
22SMF82SEG2Binary
Segment descriptor.
44SMF82FLG1Binary
System indicator
BitMeaning When Set
0-2 Reserved
3-6 Version indicator
7 Reserved
3 MVS/SP Version
55SMF82RTY1Binary
Record type 82 (X'52').
66SMF82TME4Binary
Time of day, in hundredths of a second, that the record was moved to the SMF buffer.
10ASMF82DTE4Packed
Date that the record was moved to the SMF buffer, in the form 0cyydddF (where F is the sign).
14ESMF82SID4EBCDIC
System identification (from the SID parameter).
1812SMF82SSI4EBCDIC
Subsystem identification
2216SMF82STY2Binary
Record subtype
Subtype 1 - Initialization/Refresh Section
(Offset from beginning of record: 24)
00SMF82VES4binary
Cryptographic communication vector table extension (CCVE) status bits
BitMeaning When Set
0 Special security mode allowed
1 Reserved
2 RNG cache enabled
3-5 Reserved
6 RACF checking for authorized callers
7-15 Reserved
16 Default wrapping for internal tokens is the enhanced method
17 Default wrapping for external tokens is the enhanced method
18 Key archive reference message
19-31 Reserved.
44SMF82VTS1binary
Cryptographic communication vector table (CCVT) status bits
BitMeaning When Set
0-3 Reserved
4 Compatible with CUSP and PCF
5-7 Reserved.
55SMF82IDO1binary
Current crypto domain index. 6 6 SMF_INIT_CSFPRM 1 binary The DDNAME of the member that contains the installation options data set. ICSF internally allocates CSFPARM2 DD based on CSFPARM DD with the member name removed.
0Release prior to HCR77D0.
1CSFPARM2 DD (CSFPARM DD).
2IEFPARM DD (Parmlib concatenation).
12CSMF82CKD44EBCDIC
Name of the cryptographic key data set (CKDS) that was read into storage.
5638SMF82IML4binary
Maximum length for data.
603CSMF82USR8EBCDIC
USERPARM specifies installation use in the installation options data set.
6844SMF82PKD44EBCDIC
PKDS name.
11270SMF82TKS44EBCDIC
TKDS name.
Subtype 7 - Operational Key Load Section

Note: The number of hexadecimal digits of the key check value recorded in the field SMF82KV is determined by the value of the MASTERKCVLEN parameter in installation options data set. The SMF82KV field is padded with zeros when the number of digits is less than the length of the field.

(Offset from beginning of record: 24)
00SMF82KPB4binary
Key part (KPART) bits
BitMeaning When Set
0 Key part verification pattern valid.
1 Coprocessor is a PCIXCC. (This has been deprecated; see SMF82KAP.)
2 Coprocessor is a CEX2C. (This has been deprecated; see SMF82KAP.)
3 Coprocessor is a CEX3C. (This has been deprecated; see SMF82KAP.)
4 Coprocessor is a CEX4C or higher. (This has been deprecated; see SMF82KAP.)
5 The number of valid nibbles in field SMF82KV is controlled by the MASTERKCVLEN parameter in the options data set. Field SMF82KVL lists the number of valid nibbles recorded.
6-23 Reserved.
33SMF82KVL1binary
The number of valid nibbles in field SMF82KV.
44SMF82KV8binary
Key check value of the key. The key check value is left-justified and padded with zeros.
12CSMF82KKS1binary
Coprocessor number.
13DSMF82KDX1binary
Current crypto domain index.
14ESMF82KAP1binary
Coprocessor type:
X'05' Coprocessor is a PCIXCC.
X'07' Coprocessor is a CEX2C.
X'05'
X'09'Coprocessor is a CEX3C.
X'0A' Coprocessor is a CEX4C.
X'0B' Coprocessor is a CEX5C.
X'0C' Coprocessor is a CEX6C or higher.
15F--1binary
Reserved.
1610SMF82KCK44EBCDIC
Name of the CKDS containing the key part.
603CSMF82KCL72EBCDIC
CKDS entry being modified.
Subtype 8 - Cryptographic key data set refresh section
(Offset from beginning of record: 24)
00SMF82ROC44EBCDIC
Name of the CKDS being replaced.
442CSMF82RNC44EBCDIC
Name of the CKDS to replace the current CKDS.
Subtype 9 - Dynamic CKDS Update
(Offset from beginning of record: 24)
00SMF82UCB4binary
Update CKDS bits
BitMeaning When Set
0 CKDS record added
1 CKDS record changed
2 CKDS record deleted
3 CKDS record archived.
4 CKDS record recalled.
5 CKDS record metadata changed.
6 CKDS record was changed by the CKDS KEYS utility.
7-31 Reserved.

Note: When bit 6 is off, the changes indicated by the other bits were made by a callable service. When bit 6 is on, the changes were made by the CKDS KEYS utility.
44SMF82UCN44EBCDIC
CKDS name.
4830SMF82UCL72EBCDIC
CKDS entry being modified.
Subtype 13 - Dynamic PKDS Update
(Offset from beginning of record: 24)
00SMF82_
PKDS_
BITS		4binary
Update PKDS bits
BitMeaning When Set
0 PKDS record added
1 PKDS record changed
2 PKDS record deleted
3 PKDS record archived.
4 PKDS record recalled.
5 PKDS record metadata changed.
6 PKDS record was changed by the PKDS KEYS utility.
7-31 Reserved.

Note: When bit 6 is off, the changes indicated by the other bits were made by a callable service. When bit 6 is on, the changes were made by the PKDS KEYS utility.
44SMF82_
PKDS_
NAME		44EBCDIC
PKDS name.
4830SMF82_
PKDS_
KEY_
LABEL		72EBCDIC
PKDS entry being modified.
Subtype 14 - Cryptographic Coprocessor Master Key Entry
(Offset from beginning of record: 24)
00SMF82AAB4binary
Flag bytes
0 DES NMK verification pattern is valid.
1 RSA NMK verification pattern is valid.
1 DES Key key part verification pattern is valid.
3 RSA Key key part verification pattern is valid.
4 AES NMK verification pattern is valid.
5 AES key part verification pattern is valid.
6 ECC NMK verification pattern is valid.
7 ECC key part verification pattern is valid.
8 Always on.
9 Coprocessor is a PCIXCC. (This has been deprecated; see SMF82AAP.)
10 Coprocessor is a CEX2C. (This has been deprecated; see SMF82AAP.)
11 Coprocessor is a CEX3C. (This has been deprecated; see SMF82AAP.)
12 Coprocessor is a CEX4C or higher. (This has been deprecated; see SMF82AAP.)
13-24 Reserved.
25 DES NMK entered was 24-bytes long.
26-31 Reserved.
44SMF82ANV16EBCDIC
New master key register verification pattern.
2014SMF82AKV16EBCDIC
Key part verification pattern.
3624SMF82APN1binary
Cryptographic Processor number.
3725SMF82ASN8EBCDIC
Cryptographic Processor serial number.
452DSMF82ADM1binary
Cryptographic Coprocessor domain.
462ESMF82AAP1binary
Coprocessor type:
X'05' Coprocessor is a PCIXCC.
X'07' Coprocessor is a CEX2C.
X'09' Coprocessor is a CEX3C.
X'0A' Coprocessor is a CEX4C.
X'0B' Coprocessor is a CEX5C.
X'0C' Coprocessor is a CEX6C or higher.
472F--1binary
Reserved.
Subtype 15 - PCI Cryptographic coprocessor retained key create/delete
(Offset from beginning of record: 24)
00SMF82RKF4binary
First flag byte
0 Retained key created.
1 Retained key deleted on coprocessor.
2 Retained key deleted from PKDS.
3-7 Reserved.
8 Always on
9 Coprocessor is a PCIXCC. (This has been deprecated; see SMF82RAP.)
10 Coprocessor is a CEX2C. (This has been deprecated; see SMF82RAP.)
11 Coprocessor is a CEX3C. (This has been deprecated; see SMF82RAP.)
12 Coprocessor is a CEX4C or higher. (This has been deprecated; see SMF82RAP.)
13-31 Reserved.
44SMF82RKN64EBCDIC
Label of Retained private key.
6844SMF82RKP1binary
Cryptographic Coprocessor number.
6945SMF82RKS8EBCDIC
Cryptographic Coprocessor serial number.
774DSMF82RDM1binary
Cryptographic Coprocessor domain.
784ESMF82RAP1binary
Coprocessor type:
X'05' Coprocessor is a PCIXCC.
X'07' Coprocessor is a CEX2C.
X'09' Coprocessor is a CEX3C.
X'0A' Coprocessor is a CEX4C.
X'0B' Coprocessor is a CEX5C.
X'0C' Coprocessor is a CEX6C or higher.
78 4F 1 Reserved.
Subtype 16 - PCI Cryptographic coprocessor TKE
(Offset from beginning of record: 24)
00SMF82PFL4binary
Flag bytes
0 Request command.
1 Reply response.
2-7 Reserved.
8 Always on.
9 Coprocessor is a PCIXCC. (This has been deprecated; see SMF82PAP.)
10Coprocessor is a CEX2C. (This has been deprecated; see SMF82PAP.)
11 Coprocessor is a CEX3C. (This has been deprecated; see SMF82PAP.)
12 Coprocessor is a CEX4 or higher. (This has been deprecated; see SMF82PAP.)
13-29 Reserved
30 Coprocessor is configured for CCA.
31 Coprocessor is configured for PKCS #11.
44SMF82PPN1binary
Cryptographic Coprocessor number.
55SMF82PSN8EBCDIC
Cryptographic Coprocessor serial number.
13DSMF82PDM1binary
Cryptographic Coprocessor domain.
14ESMF82PAP1binary
Coprocessor type:
X'05' Coprocessor is a PCIXCC.
X'07' Coprocessor is a CEX2C.
X'09' Coprocessor is a CEX3C.
X'0A' Coprocessor is a CEX4C.
X'0B' Coprocessor is a CEX5C.
X'0C' Coprocessor is a CEX6C or higher.

Note: For CEX4 and higher, bits 30 and 31 at offset 0 indicate whether the coprocessor is configured as a CCA or PKCS #11 coprocessor.
15F--1binary
Reserved.
1610SMF82PBL4binary
Parameter block length, "xxx".
2014SMF82PDL4binary
Parameter data block length, "yyy".
2418SMF82PBKVAREBCDIC
Parameter block of length "xxx" followed by parameter data block of length "yyy"
Subtype 16 — Subtype 16 PCI Cryptographic Coprocessor TKE audit data
(Offset from beginning of record: 24 + SMF82PBL + SMF82PDL)
00SMF82PAL4binary
Length of fixed audit data
44SMF82PAD4binary
PKCS #11 Admin request ID. All zeros if not applicable
88SMF82PFI2binary
Function ID
10ASMF82PFR4binary
Function Return code
0 - Success
4 - Not authorized
8 - Error
14ESMF82PDE256EBCDIC
Function description
27010ESMF82PUS20binary
Transaction Sequence Number (TSN) for commands or, for CCA coprocessor requests only, User ID Nonce (random number) for queries. All blanks if not applicable 290 122 SMP82PTA 8 EBCDIC TKE Authority for CCA coprocessor requests. Blanks for PKCS #11 coprocessor requests
Subtype 18 - Cryptographic processor configuration
(Offset from beginning of record: 24)
00SMF82CGB4binary
Flag bytes
0 A Cryptographic processor has been brought online.
1 A Cryptographic processor has been taken offline.
2 A Cryptographic processor has changed compliance mode.
3-7 Reserved.
8 Always on.
9 Coprocessor is a PCIXCC. (This has been deprecated; see SMF82CAP.)
10 Coprocessor is a CEX2C. (This has been deprecated; see SMF82CAP.)
11 Coprocessor is a CEX2A. (This has been deprecated; see SMF82CAP.)
12 Coprocessor is a CEX3C. (This has been deprecated; see SMF82CAP.)
13 Coprocessor is a CEX3A. (This has been deprecated; see SMF82CAP.)
14 Coprocessor is a CEX4 or higher. (This has been deprecated; see SMF82CAP.)
15-28 Reserved.
29 Configured as an accelerator
30 Configured as a CCA coprocessor
31 Configured as a PKCS #11 coprocessor
44SMF82CGX1binary
Cryptographic Coprocessor number.
55SMF82CGS8EBCDIC
Cryptographic Coprocessor serial number.
13DSMF82CAP1binary
Coprocessor type:
X'04' Coprocessor is a PCICA.
X'05' Coprocessor is a PCIXCC.
X'06' Coprocessor is a CEX2A.
X'07' Coprocessor is a CEX2C.
X'08' Coprocessor is a CEX3A.
X'09' Coprocessor is a CEX3C.
X'0A' Coprocessor is a CEX4.
X'0B' Coprocessor is a CEX5.
X'0C' Coprocessor is a CEX6 or higher.

Note: For CEX4 and higher, bits 29, 30, and 31 at offset 0 indicate whether the coprocessor is configured as an accelerator, a CCA, or a PKCS #11 coprocessor. 14 E 8 binary System Compliance Information.
Byte 0:
0Compliance mode is active.
1Compliance migration mode is active.
2-7Reserved.

Bytes 1-6: Reserved.
Byte 7:
0-6Reserved.
7PCI-HSM 2016 compliance mode is active.

Note: These byte references only relate to this 8-byte structure.
Subtype 19 - PCI X Cryptographic coprocessor timing
(Offset from beginning of record: 24)
00SMF82XTN8EBCDIC
Time just before the PCI X Cryptographic Coprocessor operation begins.
88SMF82XTD8EBCDIC
Time just after PCI X Cryptographic Coprocessor operation ends.
1610SMF82XTW8EBCDIC
Time just after results have been communicated to caller address space.
2418SMF82XTQ4binary
Number of processes waiting to submit work to the same PCI X Cryptographic Coprocessor and domain, using the same reference number.
281CSMF82XTF2EBCDIC
Function code of service.
301ESMF82XTX1binary
PCI X Cryptographic Coprocessor number.
311FSMF82XTS8EBCDIC
PCI X Cryptographic Coprocessor serial number.
3927SMF82XTM1binary
PCI X Cryptographic Coprocessor domain.
4028SMF82XTR1binary
PCI X Cryptographic Coprocessor reference number.
4129--3binary
Reserved.
Subtype 20 - Cryptographic Processor Processing Times
(Offset from beginning of record: 24)
00SMF82TFL4binary
Flag bytes
BitMeaning When Set
0Processor is a PCIXCC or PCICA. (This has been deprecated; see SMF82TPT.) Note: The record is for a PCIXCC when bits 0 and 30 are on and for a PCICA with bits 0 and 29 are on.
1Coprocessor is a CEX2C. (This has been deprecated; see SMF82TPT.)
2Coprocessor is a CEX2A. (This has been deprecated; see SMF82TPT.)
3Coprocessor is a CEX3C. (This has been deprecated; see SMF82TPT.)
4Coprocessor is a CEX3A. (This has been deprecated; see SMF82TPT.)
5Coprocessor is a CEX4 or higher. (This has been deprecated; see SMF82TPT.)
6Regional cryptographic server.
7-28Reserved.
29Configured as an accelerator.
30Configured as a CCA coprocessor.
31Configured as a PKCS #11 coprocessor.
44SMF82TNQ8EBCDIC
Coprocessor time before NQAP.
12CSMF82TDQ8EBCDIC
Coprocessor time after DQAP.
2014SMF82TWT8EBCDIC
Coprocessor time after WAIT.
281CSMF82TQU4binary
Coprocessor queue length.
3220SMF82TSF2EBCDIC
Coprocessor sub function code.
3422SMF82TIX1binary
Coprocessor index.
3523SMF82TSN8EBCDIC
Coprocessor serial number.
432BSMF82TDM1binary
Domain.
442CSMF82TRN1binary
Reference number.
452DSMF82TPT1binary
Coprocessor type:
X'04'Coprocessor is a PCICA.
X'05'Coprocessor is a PCIXCC.
X'06'Coprocessor is a CEX2A.
X'07'Coprocessor is a CEX2C.
X'08'Coprocessor is a CEX3A.
X'09'Coprocessor is a CEX3C.
X'0A'Coprocessor is a CEX4.
X'0B'Coprocessor is a CEX5.
X'0C'Coprocessor is a CEX6 or higher.

Note: For CEX4 and higher, bits 29, 30, and 31 at offset 0 indicate whether the coprocessor is configured as an accelerator, a CCA, or a PKCS #11 coprocessor.
462E--2binary
Reserved.
4830SMF82_
AP_
TME_
NQAPE_
RAW		16binary
AP extended time before NQAP.
6440SMF82_
AP_
TME_
DQAPE_
RAW		16binary
AP extended time after DQAP.
8050SMF82_
AP_
TME_
WAITE_
RAW		16binary
AP extended time after WAIT.
Subtype 21 - ICSF sysplex group change section
(Offset from beginning of record: 24)
00SMF82SXG8EBCDIC
Name of ICSF Sysplex group.
88SMF82SXM8EBCDIC
Name of sysplex member.
16FSMF82SXA1binary
ICSF Sysplex member status flags
BitMeaning When Set
0 Member joined the ICSF sysplex group.
1 Member left the ICSF sysplex group.
2-7 Reserved.
1711SMF82SXR1binary
ICSF Sysplex member conditions of status flags
BitMeaning When Set
0 Member joined or left the ICSF sysplex due to normal initialization/termination processing
1 Member left the ICSF sysplex due to error
2-7 Reserved.
1812--2binary
Reserved.
2014SMF82SXT8EBCDIC
Time of ICSF sysplex join/leave index.
281CSMF82SXC44EBCDIC
Name of active CKDS.
7248SMF82_
SYSPLEX_
TIMEE_
RAW		16binary
Extended time of ICSF sysplex join/leave index.
Subtype 22 - Trusted Block Create Callable Services Section
(Offset from beginning of record: 24)
00SMF82TBF4binary
Process Flag bytes
BitMeaning When Set
0 Created Inactive Trusted Block.
1 Activate an Inactive Block.
2 Trusted Block has Public Key.
3-31 Reserved.
44SMF82TBS2EBCDIC
ASID of caller.
66SMF82TBN64EBCDIC
Label of Input Trusted Block.
7046SMF82TBO64EBCDIC
Label of Output Trusted Block.
13486SMF82TBX64EBCDIC
Label of Transport Key.
Subtype 23 - Token Data Set Update
(Offset from beginning of record: 24)
00SMF82TKF4binary
TKDS bits
BitMeaning When Set
0 TKDS record added
1 TKDS record changed
2 TKDS record deleted
3 TKDS record archived
4 TKDS record recalled
5 TKDS record metadata changed
6 TKDS record was changed by the PKCS11 Token utility.
7-31 Reserved.

Note: When bit 6 is off, the changes indicated by the other bits were made by a callable service. When bit 6 is on, the changes were made by the PKCS11 Token utility.
44SMF82TKN44EBCDIC
TKDS name
4830SMF82TKH44EBCDIC
TKDS handle being processed
Subtype 24 - Duplicate Tokens Found
(Offset from beginning of record: 24)
00SMF82DCNTSTRT4binary
Start of duplicate labels.
44SMF82DCNTEND4binary
End of duplicate labels.
88SMF82DCNT4binary
Number of duplicate labels.
12CSMF82DRSVD4binary
Reserved.
1610SMF82DNAM44binary
Name of key data set.
The following field is repeated count (SMF82DCNT) number of times.
603CSMF82_
Label		72EBCDIC
A key label.
Subtype 25 - Key store policy for key token authorization checking
The key store policy must be activated before this SMF record subtype is logged. The subtype is logged when the callable service request fails the Key Token Authorization Checking key store policy check.
(Offset from beginning of record: 24)
00SMF82KDS44EBCDIC
Data set name.
442CSMF82KLF4binary
Key store policy flags:
BitMeaning When Set
0 Warning.
1 List is incomplete.
2 List is from CKDS.
3 List is from PKDS.
4 Authorization failures.
5 Archived failures.
6 Preactive failures.
7 Deactivated failures.
8-31 Reserved.
4830SMF82KLC4binary
Number of key labels following. SMF83@C The following field is repeated count (SMF82KLC) number of times.
5234SMF82DKL72EBCDIC
Unauthorized duplicate key label and key type.
Subtype 26 - Public Key Data Set Refresh
(Offset from beginning of record: 24)
00SMF82PREF_
FLAG		4binary
Flags:
BitMeaning When Set
0 Data space was refreshed.
1-31 Reserved.
44SMF82_
PREF_
OLDDS		44EBCDIC
Old PKDS Name.
4830SMF82_
PREF_
NEWDS		44EBCDIC
New PKDS Name.
Subtype 27 - PKA Key Management Extensions
(Offset from beginning of record: 0)
2418SMF82PKE_
FLAGS		4binary
PKA Key Management Extension flags: Bits 0-3 are set during callable services. Bits 24-30 are set during repository parsing. Bits 4-23 and 31 are reserved.
BitMeaning When Set
0 PKA token may not be used for requested function.
1 SYM token may not be exported by the provided PKA token.
2 PKA label list is imcomplete.
3 SYM label list is incomplete.
4 Input is an X.509 certificate.
24 Trusted certificate repository has changed.
25 PKA Key Management Extensions in WARNONLY mode.
26 An error was detected during processing.
27 Trusted cert repository was empty.
28 An error was detected while extracting APPLDATA.
29 The repository wasn't found.
30 One or more certs couldn't be parsed.

Bits 0-3 are set during callable services.
Bits 0-4 are set during callable services.
Bits 24-30 are set during repository parsing.
Bits 5-23 and 31 are reserved.
281CSMF82PKE_
FUNCTION		8EBCDIC
Name of the service that issued this SMF record. The name is in the form CSFzzz.
3624SMF82PKE_
APPLDATALEN		1binary
Length of the enablement profile APPLDATA or current repository name.
3725SMF82PKE_
APPLDATA		247EBCDIC
Enablement profile APPLDATA or current repository name.
28411CSMF82PKE_
FUNCSPEC		1EBCDIC
Function-specific section of the record.
28411CSMF82PKE_
APPLDATA_
PARSING		1EBCDIC
APPLDATA parsing results section.
28411CSMF82PKE_
SAF_
RC		2binary
SAF_RC or 'FFFF'X.
28611ESMF82PKE_
SERV_
RC		2binary
RACF RC or ICSF RC.
288120SMF82PKE_
SERV_
RS		4binary
RACF RS or ICSF RS.
28411CSMF82PKE_
SERVICE_
SECTION		1EBCDIC
Callable services section.
28411CSMF82PKE_
PKA_
REC_
CNT		4binary
Number of PKA labels present in this record. When the input key to the service is an X.509 certificate, there are no PKA labels present.
28611ESMF82PKE_
SERV_
RC2		2binary
RACF RC or ICSF RC.
288120SMF82PKE_
SERV_
RS2		4binary
RACF RS or ICSF RS.
288120SMF82PKE_
SYM_
REC_
CNT		4binary
Number of SYM labels present in this record.
Subtype 27 - PKA Labels

The following is repeated SMF82PKE_PKA_REC_CNT number of times.

(Offset from beginning of record: 292)
00SMF82PKE_
PKA_
LABELS		64EBCDIC
PKA key label.
Subtype 27 - SYM Labels

The following is repeated SMF82PKE_SYM_REC_CNT number of times.

(Offset from beginning of record: 292 + (64 * SMF82PKE_PKA_REC_CNT))
00SMF82PKE_
SYM_
LABELS		72EBCDIC
SYM key label.
Subtype 28 - High Performance Encrypted Key
(Offset from beginning of record: 0)
2418SMF82HPSK_
FLAGS		4binary
High Performance Encrypted Key flags:
BitMeaning When Set
0 Rewrapping operation is not permitted for this symmetric key.
1 Rewrapping operation was permitted for this symmetric key.
2 The list of labels is incomplete.
3 The key identifier was supplied as a key token, not as a label in the CKDS.
4-31 are reserved.
281CSMF82HPSK_
FUNCTION		8EBCDIC
Name of the service that issues this SMF record. The name is in the form of CSFzzzz.
3624SMF82HPSK_
SYM_
LABEL_
CNT		4binary
Number of SYM labels present in this record.
Subtype 28 - SYM Labels

The following is repeated SMF82HPSK_SYM_LABEL_CNT number of times.

(Offset from beginning of record: 40)
00SMF82HPSK_
SYM_
LABELS		72EBCDIC
SYM key label and type.
Subtype 29 - TKE Workstation Audit Record
(Offset from beginning of record: 0)
2418SMF82TKEAR_
FLAGS		4binary
Flags -- reserved
281CSMF82TKEAR_
NAMELEN		2binary
TKE workstation name length
3024SMF82TKEAR_
RCDLEN		2binary
TKE audit record data length
3220SMF82TKEAR_
NAME_
RAW		100EBCDIC
TKE workstation name
Subtype 30 - Key store policy archived and inactive KDS records
(Offset from beginning of record: 24)
00SMF82_
ARCH_
FLAGS		4binary
Flag bytes
BitMeaning When Set
0CKDS
1PKDS
2TKDS
3-7Reserved.
8Record that is archived was referenced by service. By policy, service call failed.
9Record that is archived was referenced by service. By policy, service call succeeded
10Record that is pre-active was referenced by service. Service call failed.
11Record that is inactive was referenced by service. Service call failed.
12-310Reserved
44SMF82_
ARCH_
DSNAME		44EBCDIC
Key data set name.
4830SMF82_
ARCH_
KEY_
LABEL		72EBCDIC
Key data set entry.
Subtype 31 - Cryptographic usage statistics

ICSF supports a cryptographic usage statistics section containing a header and a variable number of triplets.
Note: A single SMF record cannot exceed 32K bytes.

(Offset from beginning of record: 24)
00SMF82STAT_
VER		1binary
Version number.
11SMF82STAT_
DOMAIN		1binary
ICSF domain index.
22SMF82STAT_
LEN		2binary
Length of this header.
44SMF82STAT_
TRIPL_
OFF		2binary
Offset from SMF82STAT into triplet section.
66SMF82STAT_
TRIPL_
LEN		2binary
Length of triplet section.
88SMF82STAT_
D_
INTVAL_
STARTE_
RAW		16binary
Start time (TOD clock) of the SMF interval in STCKE format.
2418SMF82STAT_
D_
INTVAL_
ENDE_
RAW		16binary
End time (TOD clock) of the SMF interval in STCKE format.
4028SMF82STAT_
D_
USERID_
AS		8EBCDIC
The HOME address space user ID.
4830SMF82STAT_
D_
USERID_
TK		8EBCDIC
The task level user ID (if present).
5638SMF82STAT_
D_
JOBID		8EBCDIC
The job ID for the HOME address space.
6440SMF82STAT_
D_
JOBNAME		8EBCDIC
The job name for the HOME address space.
7248SMF82STAT_
D_
JOBNAME2		8EBCDIC
The job name of the SECONDARY address space (ICSF caller).
8050SMF82STAT_
D_
PLEXNAME		8EBCDIC
The sysplex member name.
(Offset from beginning of record: 24 + SMF82STAT_TRIPL_OFF)
00SMF82_
TRIPL_
TAG		2binary
Tag of the data.
22SMF82_
TRIPL_
LENGTH		2binary
Length of the tag, length, and data fields.
00SMF82STAT_
ENG_
CARD		20EBCDIC
00SMF82STAT_
ENG_
CARD_
ID		4EBCDIC
44SMF82STAT_
ENG_
CARD_
SN		8EBCDIC
12CSMF82STAT_
ENG_
CARD_
CNT		4BINARY
00SMF82STAT_
ENG_
RCS		20EBCDIC
00SMF82STAT_
ENG_
RCS_
ID		4EBCDIC
44SMF82STAT_
ENG_
RCS_
SN		8EBCDIC
12CSMF82STAT_
ENG_
RCS_
CNT		4BINARY
00SMF82STAT_
ENG_
CPACF		8BINARY
00SMF82STAT_
ENG_
SOFTW		8BINARY
00SMF82STAT_
SRV		16EBCDIC
00SMF82STAT_
SRV_
SN		8EBCDIC
88SMF82STAT_
SRV_
CNT		4BINARY
00SMF82STAT_
SRVUDX		16EBCDIC
00SMF82STAT_
SRVUDX_
SN		8EBCDIC
88SMF82STAT_
SRVUDX_
CNT		4BINARY
00SMF82STAT_
ALG		16EBCDIC
00SMF82STAT_
ALG_
SN		8EBCDIC
88SMF82STAT_
ALG_
CNT		4BINARY

The table above is based on the description provided by IBM in its "MVS Systems Management Facilities (SMF)" manual.

Copyright 2024.
Pacific Systems Group.
All rights reserved.


Spectrum Writer 4GL - the economical alternative to SAS, Easytrieve, DYL-280...

Home | Products | Prices | Documentation | 30-Day Trials | Customer Reviews | Company | FAQ | Sample Reports | SMF Records
Send Your Comments or Questions