z/OS Cryptographic Services ICSF Administrator's Guide
Previous topic | Next topic | Contents | Index | Contact z/OS | Library | PDF


Steps for adding a PCICC after CCF initialization

z/OS Cryptographic Services ICSF Administrator's Guide
SA22-7521-17

You may need to initialize PCI Cryptographic Coprocessors after system initialization.

Note:
Use this procedure if you did not run the Pass Phrase Initialization utility. If you used the utility, see Using the Pass Phrase Initialization Utility.

Follow this procedure.

  1. Select option 1, COPROCESSOR MGMT, on the Primary Menu panel.
  2. The Coprocessor Management panel, as shown in Figure 75, appears.
    Figure 75. Selecting a coprocessor on the Coprocessor Management Panel
     CSFCMP00 ---------------- ICSF Coprocessor Management -------------
     COMMAND ===> 
    
    Select the coprocessors to be processed and press ENTER.
    Action characters are: A, D, E, R, and S. See the help panel for details.
    
    COPROCESSOR  MODULE ID/SERIAL NUMBER                  STATUS
    -----------  -------------------------------          -------
    
    _ A06                                                  ACTIVE
    _ A07                                                  ACTIVE
    _ C0         E589C396944007A6 5D40369997A386F4         ACTIVE
    _ C1         0AA379BFD2387960 0367DC04533125FF         ACTIVE
    _ P00        41-00YE1                                  ACTIVE
    _ P01        41-00K11                                  ACTIVE
    _ P02        41-0A355                                  ACTIVE
    E P03        41-0BA3F                                  ONLINE
    _ P04        41-0RT2T                                  DEACTIVATED
    _ P05        41-00342                                  DISABLED    
     
  3. Select the Coprocessor to be processed by entering 'E' next to the Coprocessor.
  4. The Master Key Entry panel appears. See Figure 76.

    Figure 76. The Master Key Entry Panel to Reset Registers
    CSFDKE10------------- ICSF - Master Key Entry -----------------
    COMMAND ===> 
    
                  CCF DES/PCICC SYM-MK new master key register     : EMPTY
                  CCF Signature/PCICC ASYM-MK master key register  : EMPTY 
                  CCF Key management master key register           : EMPTY
    
    
      Specify information below
        Key Type  ===> ___              (DES, SMK, KMMK, ALL-PKA)
    
        Part      ===> ______           (RESET, FIRST, MIDDLE, FINAL)
    
        Checksum  ===> 00
    
        Key Value ===> 0000000000000000
                  ===> 0000000000000000
                  ===> 0000000000000000   (SMK, KMMK and ALL-PKA only)
    
    
    
      Press ENTER to process.
      Press END   to exit to the previous menu.
     
      

    Ensure that the CCF Signature/PCICC ASYM-MK master key register field indicates EMPTY. If it does not, you will need to RESET to clear the contents of the registers to set a new key value.

  5. You must now load the SYM-MK and ASYM-MK keys into your system.

    If you are going to reload your current master keys, you need to know the current master key value and checksum. If you want the PCICC to become ACTIVE after CCF initialization, you MUST enter the same master key values.

    Follow the instructions on Steps for entering the first master key part.

  6. When all key parts have been loaded, SET the master key. From the Primary Menu panel choose option 2 - Master Key. From the Master Key Management panel, choose option 2 - SET MK.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014