| 0 | 4 | CCVTID |
EBCDIC Cryptographic Communication
Vector Table ID. This field must contain the character string CCVT. |
| 4 | 2 | CCVTVER | Version.
The version of the CCVT.
This field must contain the character string 04 |
| 6 | 2 | CCVTLEN | The length of the CCVT. |
| 8 | 6 | CCVTAUX | Auxilliary flags.
- Bit
- Meaning When Set On
- 0
- ICSF is terminating.
- 1
- ICSF is abnormally terminating.
- 2
- ICSF initialization is performing master key validation.
- 3
- Coprocessor request interrupts enabled.
|
| 14 | 2 | CCVTRLVL | ICSF level. |
| 16 | 4 | CCVTCCVE | Cryptographic Communication Vector
Table Extension (CCVE) address.
The address of a private area extension
of the CCVT. You should place any fields not needed by other address
spaces in the CCVE. |
| 20 | 4 | CCVT_CKT_BTMB | Address of anchor for CKT. |
| 24 | 4 | CCVTPC2 | PC number for entry into module CSFASSPC. |
| 28 | 4 | CCVTPRPC | Entry point for the pre-PC processing
module, CSFARPC. |
| 32 | 4 | CCVTINST | For installation use. |
| 36 | 1 | CCVTSFG1 | Status byte.
- Bit
- Meaning When Set On
- 0
- ICSF services are active.
- 1
- At least one Integrated Cryptographic Feature has a valid master key.
- 2
- ICSF initialization complete.
- 3
- ICSF is active and PCF is not active.
- 4
- Compatibility is permitted. COMPAT(YES) or COMPAT(COEXIST) is
specified.
- 5
- At least one Integrated Cryptographic Feature is valid.
- 7
- Always set to 1.
|
| 37 | 1 | CCVTFLAG | Flag byte.
- Bit
- Meaning When Set On
- 3
- Cryptographic coprocessor hardware instructions available.
- 4
- At least one cryptographic coprocessor is active.
- 5
- Coprocessor request interrupt support active.
- 6
- At least one cryptographic coprocessor is online
- 7
- At least one coprocessor or accelerator is present.
|
| 38 | 1 | CCVTOFLG | Operational flag byte.
- Bit
- Meaning When Set On
- 0
- Configuration is under PR/SM.
- 2
- CKDS key record create, key record delete, and key record write
disallowed.
- 3
- CKDS I/O subtask is available.
- 4
- CCVT_DEF_ALG bit. If on, CDMF is the system default algorithm;
if off, DES is the default.
- 5
- CCVT_CDMF_ENA bit. If on, hardware is capable of performing
CDMF.
- 6
- PKA master keys are valid.
- 7
- Use ICSF reason codes.
|
| 39 | 1 | CCVTSVCM | SVC number for key management. This
is the PCF compatibility SVC. |
| 40 | 1 | | Reserved |
| 41 | 1 | CCVTSVCS | SVC number for DES interface SVC.
This is the PCF compatibility SVC. |
| 42 | 2 | CCVTASID | ASID of ICSF address space. |
| 44 | 4 | CcvtPcGrs | Entry point to CSFMIDGR. |
| 48 | 4 | CCVTPC3 | Entry point to CSFASSPA used by compatibility
SVCs. |
| 52 | 4 | CCVTSRUT | Address of the access method module. |
| 56 | 8 | CCVTINS2 | An 8-byte area for installation use. |
| 64 | 4 | CCVTMDS | Data space server PC. PC number for
entry to data space server that adds and deletes the in-storage CKDS. |
| 68 | 4 | CCVTLNTH | Maximum installation data length. |
| 72 | 4 | CCVTASCB | ICSF ASCB address. |
| 76 | 4 | | Reserved |
| 80 | 1 | CCVTHFLG | Flag bytes.
- Bit
- Meaning When Set On
- 0
- Crypto assist instructions available.
- 1
- Additional secure Crypto device available.
- 2
- Support for 64-bit callers.
- 3
- ICSF Cross-System Services environment is active for CKDS
- 4
- ICSF Cross-System Services environment is active for TKDS
- 5
- RSA 4096-bit function enabled and the RNGL service is
available
- 6
- Secure key AES is available
- 7
- AES master key is active
|
| 81 | 1 | CCVTSFLG | Flag bytes.
- Bit
- Meaning When Set On
- 0
- ICSF during initialization.
- 1
- ICSF was able to complete cleanup, so no EOM cleanup is needed.
- 2
- PKCS #11 operating in FIPS standard mode.
- 3
- PKCS #11 operating in FIPS compatibility mode.
|
| 82 | 1 | CCVT1FLG | Flag byte.
- Bit
- Meaning When Set On
- 0
- ECC master key is active / ECC Secure Key Functions available
- 1
- ECC clear key functions are supported
- 2
- AES KEKs, TR-31, and ECC Diffie-Hellman are supported.
- 3
- Dynamic RSA master key change enabled.
|
| 83 | 1 | | Reserved |
| 84 | 4 | CCVTENF | ECB for ENF listen. |
| 88 | 4 | CCVTTCB | ICSF maintask TCB address. |
| 92 | 4 | CCVTTRC | ECB for component trace. |
| 96 | 4 | | Reserved |
| 100 | 4 | CCVT_ABTERM_ECB | Abnormal termination ECB. |
| 104 | 8 | CCVT_CKDS_FIXED | Offsets and lengths for fixed length CKDS. |
| 112 | 8 | CCVT_CKDS_VAR | Offsets and lengths for variable
length CKDS. |
| 120 | 4 | CCVTLFDE | ECB to start the “look for disabled
crypto” task. |
| 124 | 4 | CCVTIOSE | ECB to post to use I/O subtask. |
| 128 | 4 | CCVTPCTRP | PC for CSFKSTRP entry. |
| 132 | 4 | CCVT_ACT_DURING_TERM | Activity count during term. |
| 136 | 8 | CCVTFMID | ICSF FMID. |
| 144 | 8 | CCVT_USERPARM | ICSF user parameter. |
| 152 | 1 | CCVTPKAF | PKA register clear key entry processing
flags.
- Bit
- Meaning When Set On
- 0
- KMMK is valid for CP0.
- 1
- SMK is valid for CP0.
- 2
- KMMK has been reset for CP0.
- 3
- SMK has been reset for CP0.
- 4
- KMMK is valid for CP1.
- 5
- SMK is valid for CP1.
- 6
- KMMK has been reset for CP1.
- 7
- SMK has been reset for CP1.
|
| 153 | 1 | CCVTPKAR |
- Bit
- Meaning When Set On
- 0 and 1
- SMK status for KSU0.
- 2 and 3
- KMMK status for KSU0.
- 4 and 5
- SMK status for KSU1.
- 6 and 7
- KMMK status for KSU1.
|
| 154 | 1 | CCVTPKAX | PKA register status (reserved). |
| 155 | 1 | CCVTPKAZ | PKA register status (reserved). |
| 156 | 16 | CCVTCCC | Cryptographic configuration control
(CCC). |
| 172 | 4 | CCVTSPKB | Address of public key build. |
| 176 | 4 | CCVTSPKX | Address of public key extract. |
| 180 | 4 | CCVTPIOE | ECB for PKDS I/O subtask. |
| 184 | 8 | | Reserved |
| 192 | 4 | CCVTGiveAway | Recovery token for cell pools. |
| 196 | 1 | CCVTPKDF | PKDS processing flags.
- Bit
- Meaning When Set On
- 0
- PKDS available.
- 2
- At least one PCICA is active.
- 3
- ICSF Cross-System Services environment is active for PKDS.
|
| 197 | 1 | CCVTCICS | CICS processing flags.
- Bit
- Meaning When Set On
- 0
- CSFVCCPP installed.
- 1
- CSFACKWL installed.
|
| 198 | 1 | CCVTYAFF |
- Bit
- Meaning When Set On
- 0
- ZKA compliance environment.
|
| 199 | 1 | CSFTTKDF | TKDS processing flags
- Bit
- Meaning When Set On
- 0
- TKDS available
|
| 200 | 4 | CCVTPRPD | Address of CSFVCCPP. |
| 204 | 4 | CCVTCKWL | Address of CSFVCCKW. |
| 208 | 12 | CcvtSdtTcb | Address of CSFMISDT TCBs. |
| 220 | 4 | CCVTENFP | ECB for PCI Cryptographic Coprocessor online event. |
| 224 | 6 | CcvtSdtAsid | Asids owning SYSZxKT |
| 230 | 10 | | Reserved. |
| 240 | 4 | CCVTPC6 | PC6 (CSFMWCFS entry). |
| 244 | 16 | CCVT_KXMD | Hardware feature status.
- Bit
- Meaning When Set On
- 1
- SHA-1 enabled.
- 2
- SHA-256 enabled.
Bytes 2–16 are reserved. |
| 260 | 4 | | Reserved |
| 264 | 4 | | Reserved |
| 268 | 4 | CCVTCSVG | Address of CSFSCVG. |
| 272 | 4 | | Reserved |
| 276 | 4 | CCVTDACC | ICSF DAC instructions control block
for RMF. |
| 280 | 16 | CCVT_KMC_EXPORT | Hardware feature status.
- Bit
- Meaning When Set On
- 1
- KMC DES enabled.
- 3
- KMC TDES enabled.
- 9
- KMC encrypted DES enabled.
- 11
- KMC encrypted TDES enabled.
- 18
- KMC AES 128 key enabled.
- 19
- KMC AES 192 key enabled.
- 20
- KMC AES 256 key enabled.
- 26
- KMC encrypted AES-128 enabled
- 27
- KMC encrypted AES-192 enabled.
- 28
- KMC encrypted AES-256 enabled
Change bytes 5-16 are reserved. |
| 296 | 4 | CCVTPC7 | PC7 (CSFMGARM entry) |
| 300 | 4 | CCVTPC8 | PC8 (CSFMGTRM entry) |
| 304 | 8 | CCVTGART | Token of CSFMGARC resource manager |
| 312 | 8 | CCVTGTRT | Token of CSFMGTRC resource manager |
| 320 | 4 | CCVTGARC | Address of CSFMGARC resource manager |
| 324 | 4 | CCVTGTRC | Address of CSFMGTRC resource manager |
| 328 | 4 | CCVT_IDENTITY | Identifier |
| 332 | 4 | | Reserved |
| 336 | 8 | CCVT_PSMID | Last used PSMID |
| 344 | 4 | CCVTEPRP | Address of CSFVCPC6 |
| 348 | 4 | CCVTPKB6 | Address of CSFSPKB6 |
| 352 | 4 | CCVTVRET | Address of CSFVRET |
| 356 | 4 | CCVTWRET | Address of CSFWRET |
| 360 | 4 | CCVTSRET | Address of CCVTSRET |
| 364 | 4 | CCVTGSRET | Address of CCVTGSRET |
| 368 | 4 | CCVTCVG6 | Address of CCVTCVG6 |
| 372 | 4 | Ccvt_CKDS_PREPMSG_ORIGIN | SYSid of XCF message originator for
prepare message for CKDS |
| 376 | 4 | Ccvt_PKDS_PREPMSG_ORIGIN | SYSid of XCF message originator for
prepare message for PKDS |
| 380 | 4 | Ccvt_TKDS_PREPMSG_ORIGIN | SYSid of XCF message originator for prepare
message for TKDS |
| 384 | 4 | CCVTTIOE | ECB for TKDS I/O subtask |
| 388 | 4 | CCVT_CKDS_VALUES_ACTIVE | Address of CCVT_CKDS_VALUES structures
for the active CKDS |
| 392 | 32 | | Reserved |
| 424 | 8 | CCVTTDS | Definition space information (TKDS) |
| 432 | 20 | | Reserved |
| 452 | 2 | CCVT_PKDS_MAXLRECL | Maximum logical record length for
PKDS records |
| 454 | 2 | | Reserved |
| 456 | 8 | CCVT_PKDS_DS | Current PKDS data space |
| 464 | 16 | | Reserved |
| 480 | 4 | CCVTPUPD_ECB | ECB to post for PKDS update |
| 484 | 44 | CCVT_PKDSN | PKDS data set name |
| 528 | 4 | CCVTNAMES | Address of CSFNAMES |
| 532 | 4 | CCVTSNAMES | Address of CCVTSNAMES |
| 536 | 4 | CCVTGNAMES | Address of CCVTGNAMES |
| 540 | 4 | Ccvt_MTLen | Size of module table. |
| 544 | 4 | Ccvt_MTSP | Module table subpool Id |
| 548 | 48 | Ccvt_Mt | Module Table |
| 596 | 4 | CCVTRNAMES | Address of CSFRNAMES |
| 600 | 8 | | Reserved |
| 608 | 32 | Ccvt_ModuleAddrs | Module address. |
| 640 | 8 | | Reserved |
| 648 | 4 | CCVTCSS | Address of CKDS Cross-System Services block. |
| 652 | 4 | CCVTCSST | Address of TKDS Cross-System Services block. |
| 656 | 4 | CCVTCSSP | Address of PKDS Cross-System Services block
. |
| 660 | 32 | CCVT_Keep | Area preserved across a restart of ICSF. |
| 692 | 8 | CCVTGIRT | Token of CSFMGIRT resource manager. |
| 700 | 4 | CCVTSMF82_14Ctr | counter to control writing of SMF records. |
| 704 | 44 | CCVT_CKDSN | CKDS data set name currently in use . |
| 748 | 44 | CCVT_TKDSN | TKDS data set name currently in use. |
| 792 | 24 | | Reserved |
| 816 | 0 | | |
z/OS Cryptographic Services ICSF System Programmer's Guide
Copyright IBM Corporation 1990, 2014