req->qtcb->bottom.config.feature_selection =
                        FSF_FEATURE_NOTIFICATION_LOST |
                        FSF_FEATURE_UPDATE_ALERT |
-                       FSF_FEATURE_REQUEST_SFP_DATA;
+                       FSF_FEATURE_REQUEST_SFP_DATA |
+                       FSF_FEATURE_FC_SECURITY;
        req->erp_action = erp_action;
        req->handler = zfcp_fsf_exchange_config_data_handler;
        erp_action->fsf_req_id = req->req_id;
        req->qtcb->bottom.config.feature_selection =
                        FSF_FEATURE_NOTIFICATION_LOST |
                        FSF_FEATURE_UPDATE_ALERT |
-                       FSF_FEATURE_REQUEST_SFP_DATA;
+                       FSF_FEATURE_REQUEST_SFP_DATA |
+                       FSF_FEATURE_FC_SECURITY;
 
        if (data)
                req->data = data;
                                         ZFCP_STATUS_COMMON_ERP_FAILED);
                req->status |= ZFCP_STATUS_FSFREQ_ERROR;
                break;
+       case FSF_SECURITY_ERROR:
+               req->status |= ZFCP_STATUS_FSFREQ_ERROR;
+               break;
        case FSF_ADAPTER_STATUS_AVAILABLE:
                switch (header->fsf_status_qual.word[0]) {
                case FSF_SQ_INVOKE_LINK_TEST_PROCEDURE:
                        zfcp_fc_test_link(zfcp_sdev->port);
                req->status |= ZFCP_STATUS_FSFREQ_ERROR;
                break;
+       case FSF_SECURITY_ERROR:
+               zfcp_erp_port_forced_reopen(zfcp_sdev->port, 0, "fssfch7");
+               req->status |= ZFCP_STATUS_FSFREQ_ERROR;
+               break;
        }
 }
 
 
 #define FSF_BLOCK_GUARD_CHECK_FAILURE          0x00000081
 #define FSF_APP_TAG_CHECK_FAILURE              0x00000082
 #define FSF_REF_TAG_CHECK_FAILURE              0x00000083
+#define FSF_SECURITY_ERROR                     0x00000090
 #define FSF_ADAPTER_STATUS_AVAILABLE           0x000000AD
 #define FSF_FCP_RSP_AVAILABLE                  0x000000AF
 #define FSF_UNKNOWN_COMMAND                    0x000000E2