PCICC Page Setup

Processor Page Setup

• Enable Public Key Algorithm
• Enable Cryptographic Functions
• Enable PKSC and ICSF
• Enable Cryptographic Facility (ICRF) Key Entry
• Enable Special Secure Mode

If using TKE, also

• Enable Modify Authority (Only (1) LPAR - TKE Host)
• Enable Query Signature Controls (TKE Host)
• Enable Query Transport Controls (TKE Host)
• For the TKE Host, the Control Domain must include ALL the domains that will be controlled by the TKE Host

On the PCICC Page of the Activation Profile

• PCI Cryptographics Coprocessor Candidate List includes all PCICC's and PCICA's that CAN be online
• PCI Cryptographics Coprocessor Online List includes all PCICC's and PCICAs that WILL be online when activation is complete (Selections in the Online List MUST be selected in the Candidate List)

On the Processor Page Setup

• Cryptographic Coprocessor(s) are enabled for that LPAR

z/OS Cryptographic Services ICSF TKE Workstation User’s Guide (LPAR Considerations)

zSeries PR/SM Planning Guide