Received Error Message "DFH3500 INVALID SIGNON ATTEMPT" When Trying To Signon to CICS 2.3.

Document ID : KB000025691
Last Modified Date : 14/02/2018
Show Technical Document Details

Question:

Received error message:

"DFH3500 INVALID SIGNON ATTEMPT" 

when trying to signon to CICS 2.3, after installing CA Top Secret.

Answer:

Installing CA Top Secret on CICS 2.3, requires the assembly of DFHSNT with EXTSEC=YES.

Please see sample JCL member TSSSNT23.Z, which is located in the CA Top Secret install library.

Example:

// JOB DFHSNT **SNT FOR ALL CICS23 REGIONS**                          
* *****************************************************************   
*                                                                     
*                                                                     
*  TOP SECRET SECURITY(TSS) VERSION 3.0                               
*                                                                     
*  THIS IS A *** SAMPLE *** CICS DFHSNT WITH EXTSEC=YES.              
*                                                                     
*  PLEASE REFER TO THE IBM CICS DOCUMENTATION FOR MORE INFORMATION.   
*                                                                     
*  NOTE : AN SNT WITH EXTSEC=YES IS REQURIED FOR CICS 2.3.            
*                                                                     
*         FOR CICS TRANSACTION SERVER 1.1 DO NOT RUN THIS JOB.        
*                                                                     
*         A 'DFH3500 INVALID SIGNON ATTEMPT' WILL OCCUR               
*         AT CESN SIGNON IF AN SNT WITHOUT EXTSEC=YES IS USED     
*         AT CESN SIGNON IF AN SNT WITHOUT EXTSEC=YES IS USED           
*         BY CICS.                                                      
*                                                                       
* *****************************************************************     
// LIBDEF *,SEARCH=(PRD1.MACLIB,CAI2.TOPSEC30)                          
// LIBDEF PHASE,CATALOG=CAI2.TOPSEC30                                   
// OPTION CATAL                                                         
// EXEC ASSEMBLY,SIZE=256K                                              
         PRINT NOGEN                                                    
         TITLE '** SIGNON TABLE **'                                     
*---------------------------------------------------------------------* 
*        START OF SIGNON TABLE                                          
*---------------------------------------------------------------------* 
         DFHSNT TYPE=INITIAL,EXTSEC=YES                                 
         DFHSNT TYPE=(ENTRY,DEFAULT)                                    
         DFHSNT TYPE=FINAL                                              
         END                                                            
/*                                                                      
// EXEC LNKEDT                                                          
/&                 

Please refer to the CA Top Secret Implementation: CICS Guide for more details about assembling the DFHSNT.