IBM Support

VM66266: DYNAMIC CRYPTO SUPPORT

A fix is available

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as new function.

Error description

  • Dynamic Crypto Support will enable dynamic changes to the
    Cryptographic (Crypto) environment on a z/VM system.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All installations of z/VM with Crypto        *
    *                 Express adapters.                            *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    ****************************************************************
    * RECOMMENDATION: APPLY PTF                                    *
    ****************************************************************
    Enable dynamic changes to the crypto environment on a z/VM
    system.
    

Problem conclusion

Temporary fix

Comments

  • With the PTF for this APAR, z/VM V7.1 will provide support
    to enable dynamic changes to the crypto environment on the
    system.  Commands are added to provide customers with
    an interface to make changes to the z/VM system's crypto
    environment, and to running  guests, without requiring an IPL
    of z/VM or an IPL of the guest.
    
    See included Memo To Users file for recommendations related to
    this APAR.
    
    The following publications are updated.
    
    z/VM: CP Commands and Utilities Reference, SC24-6268-04.
    
      New Commands were added.  See included help files for
      details.
    
      - The DEFINE CRYPTO command will give a general user access
        to the system's shared crypto resources.  Directory
        enablement is required for this command.
      - The VARY ON CRYPTO command will allow Crypto Express
        adapters to be brought online and made available to the
        system.
      - The VARY OFF CRYPTO command will allow Crypto Express
        adapters to be taken offline and made unavailable to the
        system.
      - The ATTACH CRYPTO command will allow crypto resources to
        be assigned to
        - The system for shared use.
        - A virtual machine for dedicated use.
      - The DETACH CRYPTO command will
        - Remove crypto resources from the system's pool of shared
          crypto resources.
        - Revoke a virtual machine's access to the system's shared
          crypto resources.
        - Remove dedicated crypto resources from a virtual machine.
    
      The response to QUERY CRYPTO DOMAINS and QUERY VIRTUAL CRYPTO
      are enhanced to provide more complete status of crypto
      resources available on the system.
    
    z/VM: CP Messages and Codes, GC24-6270-03.
      See included help files for details.
    
      Message HCP1719E is deleted.
    
      Messages HCP1828I and HCP1935E are changed.
    
      The following messages are added.
      HCP1705(01)I Unexpected CP errors have occurred $1 times
                   during APVIRTUAL crypto message processing.
      HCP1706(01)I Crypto AP $1 Domain $2 returned an undefined
                   Response Code $3 for Error State $4
      HCP1707(01)I A check-stop state has been detected for crypto
                   AP $1 Domain $2.
      HCP1708(01)I A crypto request issued by user $1 has exceeded
                   the maximum retry threshold.
      HCP1709(01)I There are no operational AP crypto resources in
                   the shared pool.  Number of messages rejected
                   for user $1 is $2
      HCP1710(01)I All operational AP crypto resources in the
                   shared pool are undergoing error recovery.
      HCP1711(01)I A recovered Machine Failure was detected for
                   crypto AP $1 Domain $2.
      HCP1712(01)I AP $1 has returned $2 check-stop failures, $3
                   recovered Machine Failures and $4 undefined
                   errors while online.
      HCP1723(01)I Crypto AP $1 Domain $2 type changed. It has been
                   removed from the shared pool.
      HCP1723(02)I Crypto AP $1 Domain $2 is no longer assigned to
                   this system.  It has been removed from the
                   shared pool.
      HCP1724(01)E Crypto APVIRTUAL is already defined.
      HCP1725(01)E The VARY command cannot complete because
                   crypto AP $1 is already online.
      HCP1725(02)E The VARY command cannot complete because
                   crypto AP $1 is already offline.
      HCP1726(01)E User $1 has no dedicated AP crypto resources to
                   detach.
      HCP1726(03)E User $1 has no dedicated AP crypto resources to
                   detach on AP $2.
      HCP1726(04)E User $1 has no dedicated AP crypto resources to
                   detach on Domain $2.
      HCP1727(01)E Crypto AP $1 Domain $2 is not attached to
                   SYSTEM.
      HCP1727(02)E There are no shared AP crypto resources to detach
                   from SYSTEM.
      HCP1728(01)E AP crypto resources are not installed on this
                   system.
      HCP1728(02)E Crypto AP $1 Domain $2 is not assigned to this
                   system.
      HCP1728(03)E Crypto AP $1 is not assigned to this system.
      HCP1728(04)E Crypto Domain $1 is not assigned to this system.
      HCP1729(01)I $1: Virtual Machine is using AP Crypto
                   capabilities not available at the destination
                   system.
      HCP1730(01)I Crypto AP $1 Domain $2 has been detached because
                   it is no longer assigned to this system.
      HCP1730(02)I Crypto AP $1 Domain $2 has been detached from
                   $3 because it is no longer assigned to this
                   system.
      HCP1737(01)E Crypto AP $1 Domain $2 cannot be attached to
                   SYSTEM because it is attached to a user.
      HCP1737(02)E Crypto AP $1 Domain $2 cannot be attached to
                   SYSTEM because it is not configured in
                   coprocessor or accelerator mode.
      HCP1737(03)E Crypto AP $1 Domain $2 cannot be attached to
                   SYSTEM because it does not match the currently
                   defined shared type.
      HCP1738(01)E Only APs or Domains can be specified, not both,
                   when attaching AP crypto resources to a user
                   that already has dedicated AP crypto resources
                   assigned.
      HCP1738(02)E Both APs and Domains must be specified when
                   attaching AP crypto resources to a user that
                   does not have dedicated AP crypto resources
                   already assigned.
      HCP1739(01)E Dedicated AP crypto resources cannot be attached
                   to an APVIRTUAL crypto user.
      HCP1740(01)E Crypto APVIRTUAL is not defined.
      HCP1741(01)E The VARY command cannot complete because
                   crypto AP $1 has the last operational resource
                   attached to $2. The FORCE option is required.
      HCP1741(02)E The VARY command cannot complete because
                   crypto AP $1 has the last operational resource
                   attached to SYSTEM. The FORCE option is required.
      HCP1742(01)E The VARY command cannot complete because
                   crypto AP $1 is not assigned to this system.
      HCP1743(01)E The VARY command cannot complete because the
                   physical vary failed; AP $1 is logically online.
      HCP1743(02)E The VARY command cannot complete because the
                   physical vary failed; AP $1 is logically offline.
      HCP1744(01)E The FORCE option is required to detach AP $1
                   Domain $ 2 because it is the last shared AP
                   crypto resource.
      HCP1745(01)E CRYPTO APVIRTUAL cannot be defined because you
                   do not have authorization to access shared
                   crypto resources on this system.
      HCP1746(01)E Crypto APVIRTUAL cannot be defined because you
                   already have access to dedicated crypto
                   resources.
      HCP1747(01)E Crypto AP $1 Domain $2 is already attached to
                   SYSTEM.
      HCP1748(01)E Crypto AP $1 cannot be attached because not all
                   domains assigned to this user are free on this
                   AP.
      HCP1748(02)E Crypto Domain $1 cannot be attached because
                   this domain is not free on all APs assigned
                   to this user.
      HCP1748(03)E Crypto AP $1 Domain $2 cannot be attached.
      HCP1749(01)E AP crypto resources on AP $1 are already
                   attached to this user.
      HCP1749(02)E AP crypto resources on Domain $1 are already
                   attached to this user.
    

APAR Information

  • APAR number

    VM66266

  • Reported component name

    VM CP

  • Reported component ID

    568411202

  • Reported release

    710

  • Status

    CLOSED UR1

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    YesSpecatt / New Function / Xsystem

  • Submitted date

    2019-03-15

  • Closed date

    2019-09-19

  • Last modified date

    2019-10-08

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UM35531

Modules/Macros

  • ATTACH   CBITABLE CPLOAD   CRYPTO   DEFINE   DETACH   HCPAPI
    HCPARD   HCPARDBK HCPATC   HCPCBI   HCPCPS   HCPCPU   HCPDEF
    HCPDTC   HCPGIR   HCPKAD   HCPKAE   HCPKAI   HCPKAP   HCPKAQ
    HCPKAR   HCPKAT   HCPKAU   HCPKAV   HCPKFC   HCPKFL   HCPKFR
    HCPLAL   HCPLGN   HCPLPF   HCPLPN   HCPMDLAT HCPMES   HCPMESA
    HCPMESB  HCPMXD   HCPMXRBK HCPPCB   HCPPCCBK HCPPCRBK HCPRDM
    HCPRLE   HCPRLG   HCPRLOBK HCPRLP   HCPRLU   HCPSXV   HCPSZK
    HCPSZL   HCPTTA   HCPTTABK HCPUDS   HCPVMDBK HCPVPLBK HCPWVS
    HCPZCP   HCP1705I HCP1706I HCP1707I HCP1708I HCP1709I HCP1710I
    HCP1711I HCP1712I HCP1717I HCP1718I HCP1720I HCP1723I HCP1724E
    HCP1725E HCP1726E HCP1727E HCP1728E HCP1729I HCP1730E HCP1737E
    HCP1738E HCP1739E HCP1740E HCP1741E HCP1742E HCP1743E HCP1744E
    HCP1745E HCP1746E HCP1747E HCP1748E HCP1749E HCP1828I HCP1935E
    HCWAI8   HCWA12   LGRVMDBK QUERY    VARY     VIRTCRYP VM66266
    

Publications Referenced
SC24626804 GC24627003      

Fix information

  • Fixed component name

    VM CP

  • Fixed component ID

    568411202

Applicable component levels

  • R710 PSY UM35531

       UP19/09/20 I 1000

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.



Document information

More support for: z/VM family

Software version: 710

Operating system(s): z/VM

Reference #: VM66266

Modified date: 08 October 2019