z/OS Cryptographic Services ICSF Administrator's Guide
Previous topic | Next topic | Contents | Index | Contact z/OS | Library | PDF


Displaying PCICC coprocessor roles

z/OS Cryptographic Services ICSF Administrator's Guide
SA22-7521-17

Use the ICSF panels to display the coprocessor role for the coprocessor. All the access control points enabled will be listed.

  1. Select option 1, COPROCESSOR MGMT, on the Primary Option panel, as shown in Figure 185.
    Figure 185. Selecting for Coprocessor Status on the Primary Menu Panel
     CSF@PRIM ----- Integrated Cryptographic Service Facility  ---------
     OPTION ===> 1
    
     Enter the number of the desired option.
    
       1  COPROCESSOR MGMT    -  Management of Cryptographic Coprocessors
       2  MASTER KEY MGMT     -  Master key set or change, CKDS/PKDS processing
       3  OPSTAT              -  Installation options
       4  ADMINCNTL           -  Administrative Control Functions
       5  UTILITY             -  ICSF Utilities
       6  PPINIT              -  Pass Phrase Master Key/KDS Initialization
       7  TKE                 -  TKE Master and Operational key processing
       8  KGUP                -  Key Generator Utility processes
       9  UDX MGMT            -  Management of User Defined Extensions
    
           Licensed Materials - Property of IBM
    
          5694-A01 (C) Copyright IBM Corp. 1990, 2011. All rights reserved.
          US Government Users Restricted Rights - Use, duplication or
          disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
    
     Press ENTER to go to the selected option.
     Press END   to exit to the previous menu.
     
  2. The Coprocessor Management panel appears. Refer to Figure 186.
    Figure 186. Coprocessor Management Panel
     CSFCMP00 ---------------- ICSF Coprocessor Management -------------
     COMMAND ===> 
    
    Select the coprocessors to be processed and press ENTER.
    Action characters are: A, D, E, R, and S. See the help panel for details.
    
    COPROCESSOR  MODULE ID/SERIAL NUMBER                  STATUS
    -----------  -------------------------------          -------
    
    _ A06                                                  ACTIVE
    _ A07                                                  ACTIVE
    _ C0         E589C396944007A6 5D40369997A386F4         ACTIVE
    _ C1         0AA379BFD2387960 0367DC04533125FF         ACTIVE
    _ P00        41-00YE1                                  ONLINE
    R P01        41-00K11                                  ACTIVE
    _ P02        41-0A355                                  ACTIVE
    _ P03        41-0BA3F                                  ONLINE
    _ P04        41-0RT2T                                  DEACTIVATED
    _ P05        41-00342                                  DISABLED    
     
  3. Select the PCICC by entering an 'R' to the left of the coprocessor. Press enter and the Status Display panel appears (Figure 187).
    Note:
    The coprocessor role can be changed with a TKE workstation. See z/OS Cryptographic Services ICSF TKE Workstation User’s Guide.
    Figure 187. Coprocessor Role Status Display Panel
    Access Control Manager - Read role 
    Authorize UDX
    Clear New ASYM Master Key Register
    Clear New DES Master Key Register
    Clear PIN Encrypt
    Clear PIN Generate - GBP
    Clear PIN Generate - Interbank
    Clear PIN Generate - VISA PVV
    Clear PIN Generate - 3624
    Clear PIN Generate Alternate - VISA PVV 
    Clear PIN Generate Alternate - 3624 Offset 
    Combine ASYM Master Key Parts
    Combine DES Master Key Parts
    Control Vector Translate
    Cryptographic Variable Encipher
    Data Key Export
    Data Key Export - Unrestricted 
    Data Key Import
    Data Key Import - Unrestricted 
    Digital Signature Generate 
    Diversified Key Generate - single length or same halves
    Diversified Key Generate - CLR8-ENC
    Diversified Key Generate - SESS-XOR 
    Diversified Key Generate - TDES-DEC
    Diversified Key Generate - TDES-ENC
    DATAM Key Management Control
    DES Key Token Change 
    Encrypted PIN Generate - GBP 
    Encrypted PIN Generate - Interbank 
    Encrypted PIN Generate - 3624
    Encrypted PIN Translate - Reformat
    Encrypted PIN Translate - Translate
    Encrypted PIN Verify - GBP
    Encrypted PIN Verify - Interbank
    Encrypted PIN Verify - VISA PVV
    Encrypted PIN Verify - 3624
    Generate CVV 
    Key Export
    Key Export - Unrestricted
    Key Generate - OP,IM,EX
    Key Generate - OPIM,OPEX,IMEX,etc.
    Key Generate - OPIM,OPEX,IMEX,etc. extended
    Key Generate - SINGLE-R
    Key Import
    Key Import - Unrestricted
    Key Part Import - first key part 
    Key Part Import - middle and last 
    Key Part Import - Unrestricted
    Key Test 
    Key Translate 
    Figure 188. Coprocessor Role Status Display Panel – part 2
    Load First ASYM Master Key Part
    Load First DES Master Key Part
    MAC Generate
    MAC Verify 
    Prohibit Export
    PKA Decrypt 
    PKA Encrypt
    PKA Key Generate
    PKA Key Generate - Clear
    PKA Key Generate - Clone
    PKA Key Import
    PKA Key Token Change RTCMK
    Reencipher CKDS
    Retained Key Delete
    Retained Key List
    Secure Key Import - DES,IM 
    Secure Key Import - DES,OP
    Secure Messaging for Keys
    Secure Messaging for PINs 
    Set ASYM Master Key
    Set DES Master Key
    Symmetric Key Export - DES, PKCS-1.2 
    Symmetric Key Export - DES, ZERO-PAD
    Symmetric Key Generate - DES, PKA92 
    Symmetric Key Generate - DES, PKCS-1.2
    Symmetric Key Generate - DES, ZERO-PAD 
    Symmetric Key Import - DES, PKA92 KEK
    Symmetric Key Import - DES, PKCS-1.2
    Symmetric Key Import - DES, ZERO-PAD
    SET Block Compose
    SET Block Decompose
    SET Block Decompose - PIN Extension IPINENC
    SET Block Decompose - PIN Extension OPINENC 
    UKPT - PIN Verify, PIN Translate
    Verify CVV 

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014