Use the ICSF panels to view the status of the coprocessors. To display coprocessor status:

1. Select option 1, COPROCESSOR MGMT, on the Primary Option panel, as shown in Figure 173.
   Figure 173. Selecting for Coprocessor Status on the Primary Menu Panel

    CSF@PRIM ----- Integrated Cryptographic Service Facility  ---------
    OPTION ===> 1
   
    Enter the number of the desired option.
   
      1  COPROCESSOR MGMT    -  Management of Cryptographic Coprocessors
      2  MASTER KEY MGMT     -  Master key set or change, CKDS/PKDS processing
      3  OPSTAT              -  Installation options
      4  ADMINCNTL           -  Administrative Control Functions
      5  UTILITY             -  ICSF Utilities
      6  PPINIT              -  Pass Phrase Master Key/KDS Initialization
      7  TKE                 -  TKE Master and Operational key processing
      8  KGUP                -  Key Generator Utility processes
      9  UDX MGMT            -  Management of User Defined Extensions
   
          Licensed Materials - Property of IBM
   
         5694-A01 (C) Copyright IBM Corp. 1990, 2011. All rights reserved.
         US Government Users Restricted Rights - Use, duplication or
         disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
   
    Press ENTER to go to the selected option.
    Press END   to exit to the previous menu.
    

2. The Coprocessor Management panel appears.
   Figure 174. Coprocessor Management Panel

    CSFGCMP0 ---------------- ICSF Coprocessor Management -------------
    COMMAND ===> 
   
   Select the coprocessors to be processed and press ENTER.
   Action characters are: A, D, E, K, R, and S. See the help panel for details.
   
                    Serial
     CoProcessor    Number         Status   AES   DES   ECC   RSA 
     -----------   ---------       ------   ---   ---   ---   ---- 
    __ H00                         ACTIVE                         
    __ G01          00000001       ONLINE    U     U     U     U  
    __ G02          00000002       ACTIVE    C     U     U     C  
    __ G03          00000003       ACTIVE    C     U     A     C  
    __ G04          00000004       ACTIVE    C     C     A     C  
    __ G05          00000005       ONLINE    U     C     E     U  
    __ E06          00000006       ACTIVE    C     C     -     C  
    __ G07          00000007       OFFLINE   

On this panel, you can view these options and their values:

Coprocessor

The prefix indicates the type of cryptographic coprocessor or accelerator.

The prefix

Represents a

A

PCI Cryptographic Accelerator

X

PCIXCC

E

CEX2C

F

CEX2A

G

CEX3C

H

CEX3A

Serial Number

The serial number is a number for the PCIXCC, CEX2C, or CEX3C.

Status

This field displays the status of the PCIXCC, CEX2C, CEX3C, PCICA, CEX2A, or CEX3A.

State

Indication

ACTIVE (PCIXCC, PCICA, CEX2C, CEX3C, CEX2A, and CEX3A)

The verification pattern for the SYM-MK matches the verification pattern of the CKDS.

ACTIVE (PCICA, CEX2A, CEX3A)

The accelerator is available for work.

ONLINE (PCIXCC, PCICA, CEX2C, CEX3C, CEX2A, and CEX3A)

The coprocessor is online, but the verification pattern for the SYM-MK or AES-MK does not match the verification pattern of the CKDS.

OFFLINE (PCIXCC, PCICA, CEX2C, CEX3C, CEX2A, and CEX3A)

The coprocessor or accelerator may be physically present but it is not available to the operating system. Either it has never been configured online or it has been configured offline by an operator command from the hardware support element.

Note:

If a card is configured offline from the Support Element, this status display may not be updated automatically. Users will need to hit enter on this panel to get the latest status.

DISABLED (PCIXCC, PCICA, CEX2C, CEX2A, CEX3C, and CEX3A)

The coprocessor or accelerator has been disabled by the TKE workstation.

DEACTIVATED (PCIXCC, PCICA, CEX2C, CEX3C, CEX2A, and CEX3A)

The coprocessor or accelerator has been deactivated from the Coprocessor Management panel.

TEMP UNAVAILABLE (PCIXCC, PCICA, CEX2C, CEX3C, CEX2A, and CEX3A)

An unexpected error has been returned from the card. The system goes into recovery to try to reset the card. If the reset is successful, the card is usable again. The user will have to press ENTER to refresh the status on the panel.

HARDWARE ERROR (PCIXCC, PCICA, CEX2C, CEX3C, CEX2A, and CEX3A)

The reset from a TEMP UNAVAILABLE condition was not successful and the card is unusable.

UNKNOWN: CODE = cccc/ssss (PCIXCC, CEX2C, CEX3C)

The coprocessor has returned an unrecognizable code in response to an attempt to determine its status. The return/reason code appears as the value of CODE.

AES DES ECC RSA

The state of the master keys in the coprocessor . The state can be U (uninitialized - the current master key register is empty), C (correct - the current master key matches the MKVP in the key data set but the master key is not active), A (active - the master key is active and requests using this master key will be processed by the coprocessor) or E (error - the current master key do not match the MKVP in the key data set). A hyphen (-) in the state area indicates the key type is not supported.