Steps for adding PCIXCC, CEX2C, or CEX3C coprocessors after initialization

z/OS Cryptographic Services ICSF Administrator's Guide

Steps for adding PCIXCC, CEX2C, or CEX3C coprocessors after initialization

z/OS Cryptographic Services ICSF Administrator's Guide
SA22-7521-17

You may need to initialize PCIXCCs, CEX2Cs, and CEX3Cs after system initialization.

Note:

Use this procedure if you did not run the Pass Phrase Initialization utility. If you used the utility, see Steps for adding a PCIXCC, CEX2C, or CEX3C after first time Pass Phrase Initialization.

Follow this procedure.

Select option 1, COPROCESSOR MGMT, on the Primary Menu panel.

The Coprocessor Management panel, as shown in Figure 118, appears.

Figure 118. Selecting a coprocessor on the Coprocessor Management Panel

 CSFGCMP0 ---------------- ICSF Coprocessor Management -------------
 COMMAND ===> 

Select the coprocessors to be processed and press ENTER.
Action characters are: A, D, E, K, R, and S. See the help panel for details.

                 Serial
  CoProcessor    Number         Status   AES   DES   ECC   RSA 
  -----------   ---------       ------   ---   ---   ---   ---- 
 __ H00                         ACTIVE                         
 __ G01          00000001       ONLINE    U     U     U     U  
 __ G02          00000002       ACTIVE    C     U     U     C  
 __ G03          00000003       ACTIVE    C     U     A     C  
 E  G04          00000004       ACTIVE    C     C     A     C  
 __ G05          00000005       ONLINE    U     C     E     U  
 __ E06          00000006       ACTIVE    C     C     -     C  
 __ G07          00000007       OFFLINE

Select the Coprocessor to be processed by entering 'E' next to the Coprocessor.

The Master Key Entry panel appears. See Figure 119.

Figure 119. The Master Key Entry Panel to Reset Registers

CSFDKE50------------- ICSF - Master Key Entry -----------------
COMMAND ===> 

              AES new master key register                : EMPTY
              DES new master key register                : EMPTY
              ECC new master key register                : EMPTY
              RSA new master key register                : EMPTY 
             
  Specify information below
    Key Type  ===> ___              (AES-MK, DES-MK, ECC-MK, RSA-MK)

    Part      ===> ______           (RESET, FIRST, MIDDLE, FINAL)

    Checksum  ===> 00

    Key Value ===> 0000000000000000
              ===> 0000000000000000
              ===> 0000000000000000  (AES-MK, ECC-MK and RSA-MK only)
              ===> 0000000000000000  (AES-MK, ECC-MK only)



  Press ENTER to process.
  Press END   to exit to the previous menu.

Ensure that the new master key registers are EMPTY. If they are not, you will need to RESET to clear the contents of the registers to set a new key value.

You must now load the master keys into your system.
If you are going to reload your current master keys, you need to know the current master key value and checksum. If you want the PCIXCC, CEX2C, or CEX3C to become ACTIVE after initialization, you MUST enter the same master key values.

Follow the instructions on Steps for entering the first master key part.
When all key parts have been loaded, SET the master key. From the Primary Menu panel choose option 2 - Master Key. From the Master Key Management panel, choose option 2 - SET MK.

Notices | Terms of use | Support | Contact z/OS | zFavorites