VM66266: DYNAMIC CRYPTO SUPPORT

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• Dynamic Crypto Support will enable dynamic changes to the
  Cryptographic (Crypto) environment on a z/VM system.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All installations of z/VM with Crypto        *
  *                 Express adapters.                            *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  ****************************************************************
  * RECOMMENDATION: APPLY PTF                                    *
  ****************************************************************
  Enable dynamic changes to the crypto environment on a z/VM
  system.
  

Problem conclusion

Temporary fix

• FOR RELEASE VM/ESACP/ESAR710 :
  PREREQ: VM66319 VM66263 VM66249 VM66206 VM66265 VM66219
  CO-REQ: NONE
  IF-REQ: NONE
  

Comments

• With the PTF for this APAR, z/VM V7.1 will provide support
  to enable dynamic changes to the crypto environment on the
  system.  Commands are added to provide customers with
  an interface to make changes to the z/VM system's crypto
  environment, and to running  guests, without requiring an IPL
  of z/VM or an IPL of the guest.
  
  See included Memo To Users file for recommendations related to
  this APAR.
  
  The following publications are updated.
  
  z/VM: CP Commands and Utilities Reference, SC24-6268-04.
  
    New Commands were added.  See included help files for
    details.
  
    - The DEFINE CRYPTO command will give a general user access
      to the system's shared crypto resources.  Directory
      enablement is required for this command.
    - The VARY ON CRYPTO command will allow Crypto Express
      adapters to be brought online and made available to the
      system.
    - The VARY OFF CRYPTO command will allow Crypto Express
      adapters to be taken offline and made unavailable to the
      system.
    - The ATTACH CRYPTO command will allow crypto resources to
      be assigned to
      - The system for shared use.
      - A virtual machine for dedicated use.
    - The DETACH CRYPTO command will
      - Remove crypto resources from the system's pool of shared
        crypto resources.
      - Revoke a virtual machine's access to the system's shared
        crypto resources.
      - Remove dedicated crypto resources from a virtual machine.
  
    The response to QUERY CRYPTO DOMAINS and QUERY VIRTUAL CRYPTO
    are enhanced to provide more complete status of crypto
    resources available on the system.
  
  z/VM: CP Messages and Codes, GC24-6270-03.
    See included help files for details.
  
    Message HCP1719E is deleted.
  
    Messages HCP1828I and HCP1935E are changed.
  
    The following messages are added.
    HCP1705(01)I Unexpected CP errors have occurred $1 times
                 during APVIRTUAL crypto message processing.
    HCP1706(01)I Crypto AP $1 Domain $2 returned an undefined
                 Response Code $3 for Error State $4
    HCP1707(01)I A check-stop state has been detected for crypto
                 AP $1 Domain $2.
    HCP1708(01)I A crypto request issued by user $1 has exceeded
                 the maximum retry threshold.
    HCP1709(01)I There are no operational AP crypto resources in
                 the shared pool.  Number of messages rejected
                 for user $1 is $2
    HCP1710(01)I All operational AP crypto resources in the
                 shared pool are undergoing error recovery.
    HCP1711(01)I A recovered Machine Failure was detected for
                 crypto AP $1 Domain $2.
    HCP1712(01)I AP $1 has returned $2 check-stop failures, $3
                 recovered Machine Failures and $4 undefined
                 errors while online.
    HCP1723(01)I Crypto AP $1 Domain $2 type changed. It has been
                 removed from the shared pool.
    HCP1723(02)I Crypto AP $1 Domain $2 is no longer assigned to
                 this system.  It has been removed from the
                 shared pool.
    HCP1724(01)E Crypto APVIRTUAL is already defined.
    HCP1725(01)E The VARY command cannot complete because
                 crypto AP $1 is already online.
    HCP1725(02)E The VARY command cannot complete because
                 crypto AP $1 is already offline.
    HCP1726(01)E User $1 has no dedicated AP crypto resources to
                 detach.
    HCP1726(03)E User $1 has no dedicated AP crypto resources to
                 detach on AP $2.
    HCP1726(04)E User $1 has no dedicated AP crypto resources to
                 detach on Domain $2.
    HCP1727(01)E Crypto AP $1 Domain $2 is not attached to
                 SYSTEM.
    HCP1727(02)E There are no shared AP crypto resources to detach
                 from SYSTEM.
    HCP1728(01)E AP crypto resources are not installed on this
                 system.
    HCP1728(02)E Crypto AP $1 Domain $2 is not assigned to this
                 system.
    HCP1728(03)E Crypto AP $1 is not assigned to this system.
    HCP1728(04)E Crypto Domain $1 is not assigned to this system.
    HCP1729(01)I $1: Virtual Machine is using AP Crypto
                 capabilities not available at the destination
                 system.
    HCP1730(01)I Crypto AP $1 Domain $2 has been detached because
                 it is no longer assigned to this system.
    HCP1730(02)I Crypto AP $1 Domain $2 has been detached from
                 $3 because it is no longer assigned to this
                 system.
    HCP1737(01)E Crypto AP $1 Domain $2 cannot be attached to
                 SYSTEM because it is attached to a user.
    HCP1737(02)E Crypto AP $1 Domain $2 cannot be attached to
                 SYSTEM because it is not configured in
                 coprocessor or accelerator mode.
    HCP1737(03)E Crypto AP $1 Domain $2 cannot be attached to
                 SYSTEM because it does not match the currently
                 defined shared type.
    HCP1738(01)E Only APs or Domains can be specified, not both,
                 when attaching AP crypto resources to a user
                 that already has dedicated AP crypto resources
                 assigned.
    HCP1738(02)E Both APs and Domains must be specified when
                 attaching AP crypto resources to a user that
                 does not have dedicated AP crypto resources
                 already assigned.
    HCP1739(01)E Dedicated AP crypto resources cannot be attached
                 to an APVIRTUAL crypto user.
    HCP1740(01)E Crypto APVIRTUAL is not defined.
    HCP1741(01)E The VARY command cannot complete because
                 crypto AP $1 has the last operational resource
                 attached to $2. The FORCE option is required.
    HCP1741(02)E The VARY command cannot complete because
                 crypto AP $1 has the last operational resource
                 attached to SYSTEM. The FORCE option is required.
    HCP1742(01)E The VARY command cannot complete because
                 crypto AP $1 is not assigned to this system.
    HCP1743(01)E The VARY command cannot complete because the
                 physical vary failed; AP $1 is logically online.
    HCP1743(02)E The VARY command cannot complete because the
                 physical vary failed; AP $1 is logically offline.
    HCP1744(01)E The FORCE option is required to detach AP $1
                 Domain $ 2 because it is the last shared AP
                 crypto resource.
    HCP1745(01)E CRYPTO APVIRTUAL cannot be defined because you
                 do not have authorization to access shared
                 crypto resources on this system.
    HCP1746(01)E Crypto APVIRTUAL cannot be defined because you
                 already have access to dedicated crypto
                 resources.
    HCP1747(01)E Crypto AP $1 Domain $2 is already attached to
                 SYSTEM.
    HCP1748(01)E Crypto AP $1 cannot be attached because not all
                 domains assigned to this user are free on this
                 AP.
    HCP1748(02)E Crypto Domain $1 cannot be attached because
                 this domain is not free on all APs assigned
                 to this user.
    HCP1748(03)E Crypto AP $1 Domain $2 cannot be attached.
    HCP1749(01)E AP crypto resources on AP $1 are already
                 attached to this user.
    HCP1749(02)E AP crypto resources on Domain $1 are already
                 attached to this user.
  ×**** PE20/07/01 FIX IN ERROR. SEE APAR VM66409  FOR DESCRIPTION
  ×**** PE20/09/30 FIX IN ERROR. SEE APAR VM66463  FOR DESCRIPTION
  ×**** PE20/12/14 FIX IN ERROR. SEE APAR VM66481  FOR DESCRIPTION
  ×**** PE21/11/17 FIX IN ERROR. SEE APAR VM66580  FOR DESCRIPTION
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UM35531

Modules/Macros

• ATTACH   CBITABLE CPLOAD   CRYPTO   DEFINE   DETACH   HCPAPI
  HCPARD   HCPARDBK HCPATC   HCPCBI   HCPCPS   HCPCPU   HCPDEF
  HCPDTC   HCPGIR   HCPKAD   HCPKAE   HCPKAI   HCPKAP   HCPKAQ
  HCPKAR   HCPKAT   HCPKAU   HCPKAV   HCPKFC   HCPKFL   HCPKFR
  HCPLAL   HCPLGN   HCPLPF   HCPLPN   HCPMDLAT HCPMES   HCPMESA
  HCPMESB  HCPMXD   HCPMXRBK HCPPCB   HCPPCCBK HCPPCRBK HCPRDM
  HCPRLE   HCPRLG   HCPRLOBK HCPRLP   HCPRLU   HCPSXV   HCPSZK
  HCPSZL   HCPTTA   HCPTTABK HCPUDS   HCPVMDBK HCPVPLBK HCPWVS
  HCPZCP   HCP1705I HCP1706I HCP1707I HCP1708I HCP1709I HCP1710I
  HCP1711I HCP1712I HCP1717I HCP1718I HCP1720I HCP1723I HCP1724E
  HCP1725E HCP1726E HCP1727E HCP1728E HCP1729I HCP1730E HCP1737E
  HCP1738E HCP1739E HCP1740E HCP1741E HCP1742E HCP1743E HCP1744E
  HCP1745E HCP1746E HCP1747E HCP1748E HCP1749E HCP1828I HCP1935E
  HCWAI8   HCWA12   LGRVMDBK QUERY    VARY     VIRTCRYP VM66266
  

Fix information

• Fixed component name

  VM CP

• Fixed component ID

  568411202

Applicable component levels

• R710 PSY UM35531

     UP19/09/20 P 2001  

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.