The Crypto Express3 feature can be configured as a coprocessor for secure key operation or as an accelerator for clear key RSA operations. The ability to change the configuration of the Crypto Express3 feature allows the administrator to change the Crypto Express3 to meet the site's processing needs. If master keys have been loaded into the registers on the Crypo Express3 feature, the master keys will be not be zeroized when the configuration is changed.

The Crypto Express3 is configured from the support element. See Support Element Operations Guide, SC28-6820, for details.

When changing the configuration:

• The coprocessor/accelerator must be deactivated on all partitions using that coprocessor/accelerator. From a z/OS System, you can do this using the ICSF coprocessor management panel. This allows any existing work queued to the coprocessor/accelerator to complete and prevents new work from being enqueued.
• When the configuration change is complete (please allow sufficient time for the support element to complete the change), the coprocessor/accelerator can be activated on the ICSF coprocessor management panel. If the support element hasn't completed the change when a coprocessor/accelerator is activated, the status will be 'busy'.
• Coprocessors with valid master keys will become active and will be used to process work. Coprocessors without valid master keys will need to have a master key loaded. Accelerators will become active and will be used to process work.