z/OS Cryptographic Services ICSF Administrator's Guide
Previous topic | Next topic | Contents | Index | Contact z/OS | Library | PDF


Migrating to a z990, z890, z9 EC, z9 BC, z10 EC, z10 BC, or z196 server

z/OS Cryptographic Services ICSF Administrator's Guide
SA22-7521-17

If you are migrating to a z990, z890, z9 EC, z9 BC, z10 EC, z10 BC, or z196 server from a CCF system, follow this procedure.

Assumptions are:

  1. You used PPINIT to initialize your CKDS and PKDS.
  2. You have not changed your master key since running PPINIT.
  3. You are migrating to a z990, z890, z9 EC, z9 BC, z10 EC, z10 BC, or z196 from a CCF system and using the same CKDS and PKDS from assumption number 1.
Note:
If you are planning to use a PKDS and CKDS, you must set the master keys; a CEX2C or CEX3C is is required for this task. The CEX2C is supported on the z9 EC, z9 BC, z10 EC, and z10 BC. The CEX3C is supported on the z10 EC, z10 BC, and z196. Ensure that you have at least one CEX2C or CEX3C configured on your server.

The procedure is as follows:

  • Access the primary menu panel and select option 6, PPINIT. The Pass Phrase MK/KDS Initialization panel appears.
    Notes:
    1. Panel CSFPMC30 appears if you are running on a z9, z10, or z196 server with the Nov. 2008 or later licensed internal code (LIC).
    2. Panel CSFPMC40 appears if you are running on a z196 server with the Sept. 2010 or later LIC.
  • Select the 'Reinitialize system' action and enter the same pass phrase from assumption number 1 and the same CKDS and PKDS.
    Figure 28. ICSF Pass Phrase MK/CKDS/PKDS Initialization Panel
     CSFPMC10 ------- ICSF - Pass Phrase MK/CKDS/PKDS Initialization ---
     Command ===>
     Enter your pass phrase (16 to 64 characters)
       ===>
    
     Select one of the initialization actions then press ENTER to process.
    
    _ Initialize system - Load the DES and asymmetric master keys to all
        coprocesors and initialize the CKDS and the PKDS.  
        CKDS ===>
        PKDS ===>
    
    s Reinitialize system - Load the DES and asymmetric master keys to all
        coprocesors and make the specified CKDS and the PKDS the current key data
        sets. 
        CKDS ===>
        PKDS ===>
    
    
     _ Add coprocessors - Initialize additional online coprocessors with the 
       same DES and asymmetric master keys.
    
    
     Press ENTER to process.
     Press END   to exit to the previous menu.
    
     
  • Press ENTER to run the utility
  • When the utility has completed successfully, press END to return to the primary menu.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014