Of course .. if you have a specific question I will try to answer it... if I can't .. I am sure that there are a few lurkers that might chime in.
redbooks http://www.redbooks.ibm.com/redbooks/pdfs/sg247123.pdf http://www.redbooks.ibm.com/redbooks/pdfs/sg246870.pdf techdocs http://www-03.ibm.com/support/techdocs/atsmastr.nsf/Web/TechDocs type in "crypto" as the search criterea http://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebDocs/?Search&Quer y=[HTMLDocumentName=WM*]+AND+(crypto)&Start=1&Count=50&SearchOrder=1&Sea rchMax=10000 crypto cards http://www-03.ibm.com/security/cryptocards/ performance http://www-03.ibm.com/servers/eserver/zseries/security/pdf/Web_z990_Cryp to_Rel_01282005.pdf security http://www-03.ibm.com/servers/eserver/zseries/security/ I am assuming that you are going to be using the CEX2C function. And some new features when it comes to sharing a ckds/pkds across multiple systems. The most confusing thing I ever tried to wrap my pea brain around was the 2 parts of the chip assignments within the HMC. The first part only defines what domains are eligible to be assigned/administered. (choose em all for every lpar). The next assigns the domain for the lpar. ... it is highly recommended (unless you have more that 16 lpars) that your domain match your lpar #. For playing around with it... use the pass-phrase initialization in the ispf panels (no.. it is not "secure"). It is a real easy way to setup before you have to go through the real setup. -Rob Schramm Sysprog p.s. there is no "for dummies" if this stuff were easy .. we'd be working in drive-thru's <vbg>. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Kittendorf, Craig Sent: Monday, February 06, 2006 9:08 AM To: [email protected] Subject: Re: ICSF for Dummies? I can't help much, I work on it a few years ago and I am now doing it again on our new box. It be helpful to the list to know what is your cpu, OS level, type of crypto processors, and even HMC level. Have you check with your IBM hardware person to make sure your crypto processor(s) are enabled. The HMC is used to assign domain numbers to the crypto processors. With our old 9672, I assigned crypto processors to each LPAR but with our new z890 and HMC 2.9, I haven't found the place to do that. Craig -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Ed Gould Sent: Sunday, February 05, 2006 10:49 PM To: [email protected] Subject: Re: ICSF for Dummies? On Feb 5, 2006, at 9:28 PM, Roger Lowe wrote: > Hi Listers, > Trying to wrap my head around configuring ICSF with CEX2C > (Crytpo Express 2) on z890. Have rtfm'ed the "ICSF Admin Guide", "ICSF > Systems Programmers Guide" and am still slightly be-fuddled. Crypto is > a whole new ball-game for me! Has anyone got an ICSF/Crypto for > Dummies to point me in the right direction? > > Cheers, Roger > Roger, I tried it 5 or so years ago and it wasn't any better back then. I was chatting with someone (forgot his name) on here and he swears the "new" doc is a lot better than the old. I have not looked at it to see. IIRC the old doc *ASSUMED* you knew the product inside and out. When I asked IBM for some help they wanted $$. signed, (DUMMY) ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
