Managing User Defined Extensions

z/OS Cryptographic Services ICSF Administrator's Guide

Managing User Defined Extensions

z/OS Cryptographic Services ICSF Administrator's Guide
SA22-7521-17

User Defined Extensions (UDX) support allows you to request implementation of a customized cryptographic callable service. This support is available for the PCICC, PCIXCC, CEX2C, and CEX3C. User Defined Extensions are ICSF functions developed for your installation with the help of IBM Global Services. Contact IBM Global Services for any problems with UDX.

With a special contract with IBM, you can develop and load your own UDXs for the z990, z890, z9 EC, z9 BC, z10 EC, z10 BC, and z196.

Note:

A TKE Workstation is required to enable the access control points for UDXs.

You must define your routine to ICSF in the Installation Options Data Set. For more detailed information on the Installation Options Data Set and the UDX keyword, see z/OS Cryptographic Services ICSF System Programmer’s Guide.

The UDX callable service load module is loaded during ICSF startup. Use the ICSF panels to perform UDX authorization processing.

You can perform these tasks:

Display a list of UDX ids of all authorized UDXs on a specific PCICC, PCIXCC, CEX2C, or CEX3C
Display a list of all PCICCs, PCIXCCs, CEX2Cs, or CEX3Cs on which a specific UDX is authorized
Authorize a UDX on any PCI cryptographic coprocessor in the system

Figure 200. Selecting the UDX MGMT Option on the ICSF Primary Menu Panel

 CSF@PRIM --------- Integrated Cryptographic Service Facility -------
 OPTION ===> 9

 Enter the number of the desired option.

   1  COPROCESSOR MGMT    -  Management of Cryptographic Coprocessors
   2  MASTER KEY MGMT     -  Master key set or change, CKDS/PKDS processing
   3  OPSTAT              -  Installation options
   4  ADMINCNTL           -  Administrative Control Functions
   5  UTILITY             -  ICSF Utilities
   6  PPINIT              -  Pass Phrase Master Key/KDS Initialization
   7  TKE                 -  TKE Master and Operational key processing
   8  KGUP                -  Key Generator Utility processes
   9  UDX MGMT            -  Management of User Defined Extensions

         Licensed Materials - Property of IBM

      5694-A01 (C) Copyright IBM Corp. 1990, 2011. All rights reserved.
      US Government Users Restricted Rights - Use, duplication or
      disclosure restricted by GSA ADP Schedule Contract with IBM Corp.


 Press ENTER to go to the selected option.
 Press END   to exit to the previous menu.

Once you have selected option 9, this panel is displayed:

Figure 201. User Defined Extensions Management Panel

 CSFUDX00 --------- OS/390 ICSF - User Defined Extensions Management -------
 OPTION ===> 

 Enter the number of the desired option.

   1  Display the authorized UDXs for a coprocessor

   2  Display the coprocessors where a UDX is authorized

   3  Authorize a UDX

Notices | Terms of use | Support | Contact z/OS | zFavorites