Steps for activating/deactivating cryptographic coprocessors

Figure 5. Primary Panel

 CSF@PRIM ----- Integrated Cryptographic Service Facility  ---------
 OPTION ===> 1

 Enter the number of the desired option.

   1  COPROCESSOR MGMT    -  Management of Cryptographic Coprocessors
   2  MASTER KEY MGMT     -  Master key set or change, CKDS/PKDS processing
   3  OPSTAT              -  Installation options
   4  ADMINCNTL           -  Administrative Control Functions
   5  UTILITY             -  ICSF Utilities
   6  PPINIT              -  Pass Phrase Master Key/CKDS Initialization
   7  TKE                 -  TKE Master and Operational key processing
   8  KGUP                -  Key Generator Utility processes
   9  UDX MGMT            -  Management of User Defined Extensions

       Licensed Materials - Property of IBM

      5694-A01 (C) Copyright IBM Corp. 1990, 2008. All rights reserved.
      US Government Users Restricted Rights - Use, duplication or
      disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

 Press ENTER to go to the selected option.
 Press END   to exit to the previous menu.

On the Coprocessor Management panel, you can select the coprocessors you want to activate or deactivate.

Figure 6. Coprocessor Management Panel

 CSFGCMP0 ---------------- ICSF Coprocessor Management -------------
 COMMAND ===> 

Select the coprocessors to be processed and press ENTER.
Action characters are: A, D, E, K, R, and S. See the help panel for details.

                 Serial
  CoProcessor    Number         Status   AES   DES   ECC   RSA 
  -----------   ---------       ------   ---   ---   ---   ---- 
 __ H00                         ACTIVE                         
 A  G01          00000001       ONLINE    U     U     U     U
 __ G02          00000002       ACTIVE    C     U     U     C
 __ G03          00000003       ACTIVE    C     U     A     C
 D  G04          00000004       ACTIVE    C     C     A     C
 __ G05          00000005       ONLINE    U     C     E     U
 __ E06          00000006       ACTIVE    C     C     -     C
 __ G07          00000007       OFFLINE   -     -     -     -

Note:

The coprocessors available for z9 EC and z9 BC are Exx and Fxx. The coprocessors available for z10 EC and z10 BC are Exx, Fxx, Gxx, and Hxx. The coprocessors available on the z196 are Gxx and Hxx.

When a PCICC, PCICA, PCIXCC, CEX2C, CEX2A, CEX3C, or CEX3A is deactivated through the Coprocessor Management Panel, the card is only deactivated for that one LPAR.