CA Top Secret for DB2 1.3 must be up and initialized before running the CNVGRANT job.
The following documentation lists the requirements needed before running the utility. Having TSSDB2 1.3 installed is the first requirement on the list.
Common causes for TSSDB2 to not initialize are:
1. DB2 v11 compatibility maintenance is not on for TSSDB2 and ENF. You have already verified that is on.
RO54332 TSSDB2 support fix
RO64641 TSS Base
RO65361 - CA DB2 common code fix
RO55816 - CA DB2 common code fix
Common Services (ENF) solution RI63020 documents RO57094/RO57084 for DB2 V11 support.
2. ENF is not up when DB2 starts up. Please make sure ENF is up before starting DB2.
3. DB2REL in ENF parms is not set correctly.
4. The TSSDB2 DCM is not installed and not in the ENF database.