Use the ICSF panels to view the status of the coprocessors or accelerators.
To display the status:
- Select option 1, COPROCESSOR MGMT, on the Primary Option panel,
as shown in Figure 171.
Figure 171. Selecting Coprocessor Status on the Primary Menu Panel
CSF@PRIM ----- Integrated Cryptographic Service Facility ---------
OPTION ===> 1
Enter the number of the desired option.
1 COPROCESSOR MGMT - Management of Cryptographic Coprocessors
2 MASTER KEY MGMT - Master key set or change, CKDS/PKDS processing
3 OPSTAT - Installation options
4 ADMINCNTL - Administrative Control Functions
5 UTILITY - ICSF Utilities
6 PPINIT - Pass Phrase Master Key/KDS Initialization
7 TKE - TKE Master and Operational key processing
8 KGUP - Key Generator Utility processes
9 UDX MGMT - Management of User Defined Extensions
Licensed Materials - Property of IBM
5694-A01 (C) Copyright IBM Corp. 1990, 2011. All rights reserved.
US Government Users Restricted Rights - Use, duplication or
disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
Press ENTER to go to the selected option.
Press END to exit to the previous menu.
- The Coprocessor Management panel appears. Refer to Figure 172.
Figure 172. Coprocessor Management Panel
CSFCMP00 ---------------- ICSF Coprocessor Management -------------
COMMAND ===>
Select the coprocessors to be processed and press ENTER.
Action characters are: A, D, E, K, R, and S. See the help panel for details.
COPROCESSOR MODULE ID/SERIAL NUMBER STATUS
----------- ------------------------------- -------
_ A06 ACTIVE
_ A07 ACTIVE
_ C0 E589C396944007A6 5D40369997A386F4 ONLINE
_ C1 0AA379BFD2387960 0367DC04533125FF ONLINE
_ P00 41-00YE1 ONLINE
_ P01 41-00K11 ONLINE
_ P02 41-0A355 ONLINE
_ P03 41-0BA3F ONLINE
_ P04 41-0RT2T DEACTIVATED
_ P05 41-00342 DISABLED
On this panel, you can view these options and their values:
- Coprocessor
- The prefix indicates the type of cryptographic coprocessor or
accelerator.
- The prefix
- Represents a
- A
- PCI Cryptographic Accelerator
- C
- Cryptographic Coprocessor Feature
- P
- PCI Cryptographic Coprocessor
Some servers allow you to partition the processor unit into
two sides (side 0 and side 1). The individual central processors,
processor storage arrays, and the channel subsystems are associated
with side 0 or side 1. The unit on Side 0 is called Coprocessor C0,
and the one on Side 1 is called Coprocessor C1.
- Module ID/Serial Number
- The module ID is the unique 128-bit value that was generated
for the CCF during the manufacturing process.The serial number is
a number for the PCI Cryptographic Coprocessor.
- Status
- This field displays the status of the PCICC, the PCICA and the
CCF.
- State
- Indication
- ACTIVE (PCICC)
- The verification pattern for the SYM-MK matches the verification
pattern of the DES master key on the server's Cryptographic Coprocessor Feature. The hash pattern
for the ASYM-MK matches the hash pattern of the Signature Master Key
(SMK) register on the server's Cryptographic Coprocessor Feature.
Requests for services can then be routed to either cryptographic
coprocessor.
- ACTIVE (PCICA)
- The PCICA is available for work.
- ACTIVE (CCF)
- The DES master key is valid.
- ONLINE (PCICC)
- The PCI Cryptographic Coprocessor is online, but one or both of the master key verification
patterns or hash patterns do not match those of the server's Cryptographic Coprocessor Feature.
Requests for services cannot be routed to the PCI Cryptographic Coprocessor.
- ONLINE (CCF)
- The DES master key is not valid.
- OFFLINE (PCICC and PCICA)
- A PCICC or PCICA may be physically present but it is not available
to the operating system. Either it has never been configured online
or it has been configured offline by an operator command from the
hardware support element.
Note:
If a PCICC or PCICA card
is configured offline from the Support Element, this status display
may not be updated automatically. Users will need to hit enter on
this panel to get the latest status.
- DISABLED (PCICC and CCF)
- The PCI Cryptographic Coprocessor or the Cryptographic Coprocessor Feature has been disabled
by the TKE workstation.
- DEACTIVATED (PCICC and PCICA)
- The PCI Cryptographic Coprocessor or the PCI Cryptographic Accelerator
has been deactivated from the Coprocessor Management panel.
- TEMP UNAVAILABLE (PCICC and PCICA)
- An unexpected error has been returned from the card. The system
goes into recovery to try to reset the card. If the reset is successful,
the card is usable again. The user will have to press ENTER to refresh
the status.
- HARDWARE ERROR (PCICC and PCICA)
- The reset from a TEMP UNAVAILABLE condition was not successful
and the card is unusable.
- HARDWARE ERROR (CCF)
- A hardware error has been detected.
- UNKNOWN: CODE = cccc/ssss (PCICC)
- The PCICC has returned an unrecognizable code in response to
an attempt to determine its status. The return/reason code appears
as the value of CODE.
|