A fix is available
APAR status
Closed as new function.
Error description
new function E2964/K
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: RMF users * **************************************************************** * PROBLEM DESCRIPTION: RMF support for Cryptographic * * Express5S cards on the IBM z13 server * * (E2964/K). * * Enhanced RMF reporting for ICSF * * operations. * **************************************************************** * RECOMMENDATION: * **************************************************************** With this APAR, RMF's Monitor I Crypto data collection is extended to recognize performance measurements from CEX5 cards, configured as Crypto Express5S Coprocessor (CEX5C), Crypto Express5S Accelerator (CEX5A) or Crypto Express5S PKCS11 Coprocessor (CEX5P) type on IBM z13 server (E2964/K). CEX5 cards measurements are stored in the existing Cryptographic Data Section of SMF record 70 subtype 2. In addition, RMF's Monitor I Crypto data collection is extended to recognize ICSF performance measurements when available: RSA Digital Signature Generate callable servies RSA Digital Signature Verify callable servies ECC Digital Signature Generate callable servies ECC Digital Signature Verify callable servies AES MAC Generate callable servies AES MAC Verify callable servies FPE Encipher callable services FPE Decipher callable services FPE Translate callable services These measurements are stored in a existing ICSF Data Section of SMF record 70 subtype 2. The Postprocessor Crypto Activity XML and text reports provides these measurements. >>>>> SMF RECORD TYPE 70 TO 79 - RMF PRODUCT SECTION <<<<< The SMF record level change number SMFxxSRL at offset 51 (x33) changes to 110 (x6E). >>>>> SMF RECORD TYPE 70 SUBTYPE 2 - CRYPTO ACTIVITY <<<<< Field R7023CT of the Cryptographic Coprocessor Data Section contains the crypto processor type, which can be 3 = PCICC, 5 = PCIXCC, 7 = CEX2C, 9 = CEX3C, 10 = CEX4C , 11 = CEX5C Field R7024CT of the Cryptographic Accelerator Data Section contains the crypto processor type, which can be 4 = PCICA, 6 = CEX2A, 8 = CEX3A, 10 = CEX4A , 11 = CEX5A Field R7025CT of the Cryptographic PKCS11 Coprocessor Data Section contains the crypto processor type, which can be 10 = CEX4P , 11 = CEX5P The ICSF Service Data Section is extended OFFSET NAME LEN FORMAT DESCRIPTION Digital Signatures measurements. Fields are only valid if R702CDLV is greater than 13. 284 x11C R702DRGC 8 floating Number of calls to generate the RSA digital signatures. 292 x124 16 Reserved 308 x134 R702DRVC 8 floating Number of calls to verify the RSA digital signatures. 316 x13C 16 Reserved 332 x14C R702DEGC 8 floating Number of calls to generate the ECC digital signatures. 340 x154 16 Reserved 356 x164 R702DEVC 8 floating Number of calls to verify the ECC digital signatures. 364 x16C 16 Reserved AES MAC measurements. Fields are only valid if R702CDLV is greater than 17 380 x17C R702AMGC 8 floating Number of calls to generate the AES MACs. 388 x184 R702AMGB 8 floating Number of bytes of data for which the AES MACs were generated. 396 x18C R702AMGI 8 floating Number of instructions used to generate the AES MACs. 404 x194 R702AMVC 8 floating Number of calls to verify the AES MACs 412 x19C R702AMVB 8 floating Number of bytes of data for which the AES MACs were verified. 420 x1A4 R702AMVI 8 floating Number of instructions used to verify the AES MACs. FPE measurements. Fields are only valid if R702CDLV is greater than 19 428 x1AC R702FPEC 8 floating Number of calls to encipher data using FPE. 436 x1B4 R702FPEB 8 floating Number of bytes of data enciphered using FPE. 444 x1BC R702FPEI 8 floating Number of instructions used to encipher data using FPE. 452 x1C4 R702FPDC 8 floating Number of calls to decipher data using FPE. 460 x1CC R702FPDB 8 floating Number of bytes of data deciphered using FPE. 468 x1D4 R702FPDI 8 floating Number of instructions used to decipher data using FPE. 476 x1DC R702FPTC 8 floating Number of calls to translate data using FPE. 484 x1E4 R702FPTB 8 floating Number of bytes of data translated using FPE. 492 x1EC R702FPTI 8 floating Number of instructions used to translate data using FPE. >>>>>> POSTPROCESSOR CRYPTO HARDWARE ACTIVITY REPORT <<<<<< The existing Cryptographic CCA Coprocessor section is enhanced to provide CEX5C card measurements. The existing Cryptographic PKCS11 Coprocessor section is enhanced to provide CEX5P card measurements. The existing Cryptographic Accelerator section is enhanced to provide CEX5A card measurements. The existing ICSF Services section is enhanced to provide the new ICSF measurements. New fields in ICSF Services section: AES MAC GENERATE RATE Rate of requests to generate AES MACs GENERATE SIZE Average number of bytes per request for which AES MACs have been generated. VERIFY RATE Rate of requests to verify AES MACs. VERIFY SIZE Average number of bytes per request for which AES MACs have been verified. RSA DSIG GENERATE RATE Rate of requests to generate RSA digital signatures. VERIFY RATE Rate of requests to verify RSA digital signatures. ECC DSIG GENERATE RATE Rate of requests to generate ECC digital signatures. VERIFY RATE Rate of requests to verify ECC digital signatures. FORMAT PRESERVING ENCRYPTION ENCIPHER RATE Rate of requests to encipher data using FPE. ENCIPHER SIZE Average number of bytes per request that have been enciphered using FPE. DECIPHER RATE Rate of requests to decipher data using FPE. DECIPHER SIZE Average number of bytes per request that have been deciphered using FPE. TRANSLATE RATE Rate of requests to translate data using FPE. TRANSLATE SIZE Average number of bytes per request that have been translated using FPE. +--------------------------------------------------------------+ >>>>>> POSTPROCESSOR OVERVIEW CONDITIONS <<<<<< Following new overview conditions are provided for SMF record type 70.2: CONDITIONS CONDITION ALGORITHM NAME --------------------------+---------+-------------------------- AES MAC generation rate CRYIAMGR R702AMGC/ SMF70INT --------------------------+---------+-------------------------- AES MAC generation size CRYIAMGS R702AMGB/ R702AMGC --------------------------+---------+-------------------------- Number of instructions CRYIAMGI R702AMGI used to generate AES MACs --------------------------+---------+-------------------------- AES MAC verify rate CRYIAMVR R702AMVC/ SMF70INT --------------------------+---------+-------------------------- AES MAC verify size CRYIAMVS R702AMVB/ R702AMVC --------------------------+---------+-------------------------- Number of instructions CRYIAMVI R702AMVI used to verify AES MACs --------------------------+---------+-------------------------- RSA digital signature CRYIDRGR R702DRGC/ generation rate SMF70INT --------------------------+---------+-------------------------- RSA digital signature CRYIDRVR R702DRVC/ verify rate SMF70INT --------------------------+---------+-------------------------- ECC digital signature CRYIDEGR R702DEGC/ generation rate SMF70INT --------------------------+---------+-------------------------- ECC digital signature CRYIDEVR R702DEVC/ verify rate SMF70INT --------------------------+---------+-------------------------- FPE encipher rate CRYIFPER R702FPEC/ SMF70INT --------------------------+---------+-------------------------- FPE encipher size CRYIFPES R702FPEB/ R702FPEC --------------------------+---------+-------------------------- Number of instructions CRYIFPEI R702FPEI used to encipher data using FPE --------------------------+---------+-------------------------- FPE decipher rate CRYIFPDR R702FPDC/ SMF70INT --------------------------+---------+-------------------------- FPE decipher size CRYIFPDS R702FPDB/ R702FPDC --------------------------+---------+-------------------------- Number of instructions CRYIFPDI R702FPDI used to decipher data using FPE --------------------------+---------+-------------------------- FPE translate ate CRYIFPTR R702FPTC/ SMF70INT --------------------------+---------+-------------------------- FPE translate size CRYIFPTS R702FPTB/ R702FPTC --------------------------+---------+-------------------------- Number of instructions CRYIFPTI R702FPTI used to translate data using FPE --------------------------+---------+--------------------------
Problem conclusion
Temporary fix
Comments
KEYWORDS: E2964/K
APAR Information
APAR number
OA43493
Reported component name
RMF
Reported component ID
566527404
Reported release
790
Status
CLOSED UR1
PE
NoPE
HIPER
NoHIPER
Special Attention
YesSpecatt / New Function / CST /
Xsystem
Submitted date
2013-09-27
Closed date
2015-01-26
Last modified date
2016-05-17
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UA76023 UA76024
Modules/Macros
ERBDUCRY ERBEXCIT ERBEXCRY ERBMFBSR ERBMFDCY ERBMFICA ERBMFICY ERBMFIZS ERBMFLUV ERBMFRCY ERBPCTBL ERBPPASS ERBPPCOM ERBPPCON ERBRMFPP ERBSMFI ERBSMF70 ERB3GCTC ERB3GSMF ERB3GSMM ERB3RTBR
Fix information
Fixed component name
RMF
Fixed component ID
566527404
Applicable component levels
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"790","Edition":"","Line of Business":{"code":"","label":""}},{"Business Unit":{"code":null,"label":null},"Product":{"code":"SG19O","label":"APARs - MVS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"790","Edition":"","Line of Business":{"code":"","label":""}}]
Document Information
Modified date:
17 May 2016