Re: ICSF - will deactivateop Lpar 'A' affect other lpars? and does it remain deactivatedacross IPLs?

. regards Francis van Zutphen -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN

Re: ICSF - will deactivateop Lpar 'A' affect other lpars? and does it remain deactivatedacross IPLs?

You can easily control which services are used and which are not. ICSF calls RACF, see CSF* classes. BTW: Why do you afraid? What's the risk you want to avoid? Just curious. -- Hello Radoslaw, I had already set on the RACF audit bit for the CSF* classes and have successfully execute some ICSF

Re: ICSF - will deactivateop Lpar 'A' affect other lpars? and does it remain deactivatedacross IPLs?

Mark, Rob and Radoslaw, Thanks for your feedback. OK, so HMC is the medium to make the co-processor offline to lpar A and B. I will pass on this instruction to our hardware engineer - he manages the domain assignment to the crypto cards. He will have to raise a Change Request and this will take

Re: ICSF - will deactivateop Lpar 'A' affect other lpars? and does it remain deactivatedacross IPLs?

Hi Mark, On second thoughts, I will leace ICSF running, other wise the API's to CPACF will not work..I know that we use hashing... -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to

ICSF - will deactivateop Lpar 'A' affect other lpars? and does it remain deactivatedacross IPLs?

. Will the deactivate status remain across IPLs? At a later stage we will use the support element to remove domain definitions for Aand B regards Francis van Zutphen -- For IBM-MAIN subscribe / signoff

What is the justification for not using Trusted Key Entry (TKE) workstation?

Hello ICSF We have a particular mainframe environment which is a contained Data Server (only DB2 databases and CICS). We do not have any ATM or PIN applications; we do have websphere; we do not have direct customer/user access on this machine. The non-mainframe platforms communicate with this

ICSF - How do I display the CEX3 MCL level?

I need to check if CEX3 MCL level is as follows: Driver 93G , EC N48132 , MCL N48132.001-003 , Bundle 3 Is there an ICSF query that can display this information or is this a HMC (SE) function? -- For IBM-MAIN subscribe /

ICSF question - Is a Master Key mandatory in order to ac cess the coprocessor?

We just dismantled the last Crypto application on one of our lpars and our CKDS is now empty. My colleague thinks that the MK can now be deleted as we do not have any application keys in the CKDS. We still have several middleware software products active(file transfer...etc) that use SSL. Do

Re: ICSF question - Is a Master Key mandatory in order to ac cess the coprocessor?

I just discovered the following text: RE: z/O HO OP C Newsletter Issue 23, august 2010 - Let's clear up this xcrypto confusion! The Random Number Generate (CSNBRNG) service requires an active coprocessor and (depending on the version of ICSF your system is running) might require master

Is a Master Key mandatory in order to access the coprocessor?

We just dismantled the last Crypto application on one of our lpars and our CKDS is now empty. My colleague thinks that the MK can now be deleted as we do not have any application keys in the CKDS. We still have several middleware software products active(file transfer...etc) that use SSL. Do

How many CPACFs do I have on z10 EC model E12?

Hello, We have a z10 EC E12. D M=CPU Operator Command produces the following results: LPAR_1 == PROCESSOR STATUS ID CPU SERIAL 00 + 01 01 + 01 02 + 01 03 +

Re: How many CPACFs do I have on z10 EC model E12?

Hello Phil, Thanks for the info. Firstly I know that CPACF is not a co-processor. I guess my confusion lies in the fact that we have two Crypto Express2 features, so I am also assuming that you can also have a number of CPACF facilities. You answer suggests that I should think in terms of