IBM Support

SI48284 - CY3-INCORRECT AMEX CSC Version 2

PTF Cover Letter


PTF ( Program Temporary Fixes ) Cover letter


Order this fix

Abstract

CY3-INCORRECT AMEX CSC Version 2


Pre/Co-Requisite PTF / Fix List

REQ  LICENSED      PTF/FIX  LEVEL

TYPE PROGRAM  REL  NUMBER   MIN/MAX  OPTION
---- -------- ---  -------  -------  ------
PRE  5770SS1  710  SI46147   00/00    0000
DIST 5770999  710  MF50486   00/00    0000
DIST 5770SS1  710  SI40203   NONE     0035



NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the license agreement which
accompanied, or was contained in, the Program for which you are obtaining
the PTF.  You are not authorized to install or use the PTF except as part
of a Program for which you have a valid Proof of Entitlement.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.

The applicable license agreement may have been provided to you in printed
form and/or may be viewed using the Work with Software Agreements (WRKSFWAGR)
CL command.


APAR Error Description / Circumvention

-------------------------------------------------
Operations using the AMEX CSC Version 2.0 algorithm may produce
incorrect output.

CORRECTION FOR APAR 'SE53597' :
-------------------------------
During the processing of the AMEX CSC Version 2.0 algorithm,
EDE2 Triple DES was being used for encryption instead of EDE3
Triple DES.  Correct results were being generated only when the
key contained replicated halves.  The problem has been fixed.

CIRCUMVENTION FOR APAR 'SE53597' :
----------------------------------
None.


Activation Instructions


None.




Special Instructions

After applying or removing the PTF, if device descriptions for one
or more 4765 Cryptographic Coprocessors are varied on, vary them
off and then back on using either the Vary Configuration (VFYCFG)
or the Work with Configuration Status (WRKCFGSTS) CL commands.

If no device descriptions for a 4765 Coprocessor are varied on,
no descriptions for a 4765 Coprocessor exist, or no 4765 Coprocessors
are installed, nothing further needs to be done.


********************************************************************
THE FOLLOWING ARE SUPERSEDED SPECIAL INSTRUCTIONS. IF THE SUPERSEDED
PTF HAS ALREADY BEEN APPLIED AND ITS SPECIAL INSTRUCTION FOLLOWED,
IT IS NOT NECESSARY TO FOLLOW THAT SPECIAL INSTRUCTION AGAIN.
********************************************************************

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI46217 :
=================================================

If no 4765 cryptographic coprocessors are installed in the system,
nothing further needs to be done.


This PTF contains a new level of firmware for the PCIe interface
component on the CCIN 4765 Cryptographic coprocessor. Unlike the other
firmware for the 4765, This new firmware will not be automatically
downloaded to the coprocessor when the cryptographic device description
is varied on.  Instead, a new procedure has been defined that uses the
System Service Tools to perform this download.


To update the PCIe interface component firmware:

1) Type WRKHDWRSC *CRP, and press enter.

You should see the Work with Cryptographic Resources display.

2) Record the names of each resource with type 4765.

3) Type 5 to Work with Configuration Descriptions next to the
first 4765 in the list, and press enter.

You should see the Work with Configuration Descriptions display.

If you do not see any configurations in the list, you will not
be able to continue with these instructions until a device
description has been created for this resource.

4) Type 8 next to the device name to Work with Configuration Status,
and then press enter.  If there is more than one device you
will need to repeat this step for each device until a device
is found to be varied on.

5) You should see the Work with Configuration Status display.
If the device is varied on, vary it off.  Type 2 next to
the device name, and press enter.

6) If PTF SI43664  has not been previously applied or its
special instructions not followed, the device will need to
go through a vary on-vary off cycle.  Type 1 next to the
device name, and press enter.  After the configuration
status changes to active, type 2 next to the device name,
and press enter.

The device should be varied off at this point.

7) Exit all the way out of the WRKHDWRSC command.

8) Type STRSST and press enter to start system service tools.

9) Enter a valid system service tools user id and password and then
press enter.

10) Type 1 to Start a service tool, and then press enter.

You should see the Start a Service Tool display.

11) Type 4 to select Display/Alter/Dump, and then press enter.

You should see the Display/Alter/Dump Output Device display

12) Type 1 to select Display/Alter Storage, and then press enter.

You should see the Select Data display.

13) Type 2 to select Licensed Internal Code (LIC) data, and then press
enter.

You should see the Select LIC data display.

14) Type 14 to select Advanced Analysis, and then press enter.

You should see the Select Advanced Analysis Command display.

15) On the first line, enter "1" in the Option field and
"UPDATECRYPTOFIRMWARE" in the Command field,and then press enter

You should see the Specify Advanced Analysis Options display.

16) In the Options field, type the resource name of the cryptographic
coprocessor to be updated, and then press enter.

The download procedure takes approximately 2-3 minutes, but should
not take longer than 6 minutes; no updates to the display will occur
until the process completes or an  error is detected.   If the
firmware download was successful, it will be used by the coprocessor
the next time the cryptographic device description is varied on.

If the firmware update is successful you will see the following:


----------------------------------------------------------------------
Image Version:   xxxx
Adapter Version: xxxx
Adapter Reset Complete.
Post2/Post1 Versions: yyyy / zzzz
Image Download Complete...Rebooting Adapter Now.
Adapter Reset Complete.
Firmware successfully updated.

The firmware will be used the next time device is varied on.

----------------------------------------------------------------------

If the firmware is already up to date, you will see this:

Adapter Firmware level is up to date. No update Attempted.


17) If there are additional 4765 coprocessors to be updated, press F12
to return to the Select Advanced Analysis Command display and
repeat steps 15 and 16 for each 4765.  Otherwise, exit out of
System Service Tools.



NOTE: Once firwmare has been updated in the 4765, it is not possible to
revert back to the previous firmware level.

SPECIAL INSTRUCTIONS FOR SUPERSEDED PTF SI43664 :
=================================================

After applying or removing the PTF, if device descriptions for one
or more 4765 Cryptographic Coprocessors are varied on, vary them
off and then back on using either the Vary Configuration (VFYCFG)
or the Work with Configuration Status (WRKCFGSTS) CL commands.

If no device descriptions for a 4765 Coprocessor are varied on,
no descriptions for a 4765 Coprocessor exist, or no 4765 Coprocessors
are installed, nothing further needs to be done.


Default Instructions

THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
   SI46757      CY3 Update D/T4765 firmware level to CCA 4.2.8
   SI46217      CY3 D/4765 new firmware component for CCA level 4.1.8
   SI43664      CY3 Update firmware for D/T4765 to CCA level 4.1.8
   SI41931      CY3 Refresh firmware for D/T4765
   SI41186      CY3-INCORROUT Errors occur using RSA keys greater than 2048
   SI37782      CY3 Add support for future enhancements

Summary Information

System..............................i
Models..............................
Release.............................V7R1M0
Licensed Program...............5733CY3
APAR Fixed..........................SE53597
Superseded by:......................
Recompile...........................N
Library.............................QCCADEV
MRI Feature ........................NONE
Cum Level...........................


System i Support

IBM disclaims all warranties, whether express or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. By furnishing this document, IBM grants no licenses to any related patents or copyrights. Copyright © 1996,1997,1998, 1999, 2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017 IBM Corporation. Any trademarks and product or brand names referenced in this document are the property of their respective owners. Consult the Terms of use link for trademark information.

[{"Type":"MASTER","Line of Business":{"code":"LOB57","label":"Power"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SWG60","label":"IBM i"},"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"7.1.0"},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG15V","label":"PTF Cover Letters - OS\/400 General"},"Component":"","ARM Category":[],"Platform":[{"code":"PF012","label":"IBM i"}],"Version":"V7R1M0","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
30 October 2012