DFSMSdss invokes ICSF callable services for the DUMP command. If your installation uses RACF® or a similar security product, ensure that the security administrator authorizes DFSMSdss to use the following services and any cryptographic keys that are specified as input:

• CSFCKM Multiple clear key Import
• CSFENC Encipher
• CSFRNG Generate a random number
• CSFSYE Encipher using clear DES/AES key
• CSFPKE Public key encrypt
• CSFSYG Generate and wrap a symmetric key
• CSFSYX Export a symmetric key
• CSFOWH One-way hash.

Similarly, ensure that the security administrator authorizes DFSMSdss to use the following ICSF callable services and cryptographic keys for the RESTORE command:

• CSFCKM Multiple clear key import
• CSFDEC Decipher
• CSFSYD Decipher using clear DES/AES key
• CSFOWH One-way hash
• CSFPKD Public key decrypt
• CSFSYI Import a symmetric key.