SFTP fails RC = 12, RSNcode = 36156

[Vikesh]

Good day all,
I'm not sure which forum to pose this question as perhaps OpenSSH related.
Using the OpenSSH User's Guide etc to implement SFTP,

CoZBatchÝN¨: version: 4.0.0 2016-07-14
CoZBatchÝN¨: Copyright (C) Dovetailed Technologies, LLC. 2005-2016. All rights reserved.
CoZBatchÝI¨: executing progname=login-shell="-/bin/sh"
Co:Z SFTP version: 4.0.0 (6.4p1) 2016-07-14
Copyright (C) Dovetailed Technologies, LLC. 2008-2016. All rights reserved.
Connecting to 10.30.6.40...
FOTS3001 zsshIcsfMacCompute (540): CSFPOWH failed: return code = 12, reason code = 36156
Ý83.569¨ Connection closed
CoZBatchÝI¨: returning rc=exitcode=255

The reason code indicates :
8D3C (36156)
A PKCS #11 service is being requested. The service is disabled due to an ICSF FIPS self test failure. The request is not processed.
User action: Report the problem to your IBM support center

The CPACF feature code is not activated and won't be able to due to our z196 withdrawn from marketing and we can't order any additional features on the z196 processor.

Is there any way to run SFTP without the use of CPACF ?

Many thanks for your replies.

Regards,
Vikesh

[dovetail]

The FOTS3001 error is an IBM Ported Tools OpenSSH failure.

You need to update your IBM OpenSSH configuration to disable ICSF, then you will be able to use CO:Z SFTP.

[Vikesh]

Hi,
Not sure if disable ICSF meant removing the following statements from zos_ssh_config & zos_sshd_config, but doing so allowed SFTP to work.
CiphersSource ICSF
MACsSource ICSF

Much appreciated for your assistance,
Vikesh