The best example for defining multiple domains to an LPAR would be to provide additional resources for peak periods. Specifically, LPAR 5 might normally run as a test or development LPAR and be associated with Domain 5. However, there may be periods where the production LPARs might not provide sufficient resources (say the holiday shopping period) and the test z/OS system running in LPAR 5 would be shut down, and a production image started, using domain 6. The master keys associated with the test system would be preserved in Domain 5, and be available when the LPAR is switched back to the test system, however, while running the production workload it would have access to the production master keys stored in Domain 6.
When LPAR 5 has both domain 5 and 6 assigned, then the ICSF parms for the test system would have to specify DOMAIN(5) and the ICSF parms for the additional production system would have to specify DOMAIN(6). I am not aware of a way to determine the Domain number, but its an interesting requirement. I would think that selecting/assigning a domain at the DR site would be covered in the planning phase. In most cases, they can probably assign the domain that you want. In the rare cases where they can't (another customer who uses the same domain is performing a DR at the same time on the same machine) then the DR provider should tell you that today you're using Domain 10, and you'll have to change the Options data set. Whether the DR provider tells you, or you query the environment, either way, you have to update the options data set. It might save you a false start on starting ICSF, but you wouldn't need to reIPL, simply update the options and start ICSF again. Greg Boyd IBM WSC, System z Crypto On Fri, 16 May 2008 13:07:01 -0500, Roberto Ibarra Magdaleno <[EMAIL PROTECTED]> wrote: >Good question David, is there any shop out there where they use multiple >domains per LPAR and how they use them if there is any? >Anyway, and maybe now is just a matter of curiosity, does anybody knows a >"place" or a method to extract such data from the system before starting >ICSF? > >On Fri, May 16, 2008 at 5:01 AM, Jousma, David <[EMAIL PROTECTED]> wrote: > >> I consider it a pretty unlikely situation where there are multiple >> domains per lpar in most shops. It is only a gut feeling on my part, >> however. >> >> >> _______________________________________________________ >> >> Dave Jousma >> Assistant Vice President >> Mainframe Services >> [EMAIL PROTECTED] >> 616.653.8429 >> >> >> -----Original Message----- >> From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On >> Behalf Of Roberto Ibarra Magdaleno >> Sent: Thursday, May 15, 2008 2:33 PM >> To: IBM-MAIN@BAMA.UA.EDU >> Subject: Re: Display or view the Crypto Current domain index or Usage >> domain index >> >> Still the same question David, how to know if there is always only one >> domain without asking anyone, but the system? >> >> >> On Thu, May 15, 2008 at 1:12 PM, Jousma, David <[EMAIL PROTECTED]> >> wrote: >> >> > If there is ever only one domain assigned to a particular lpar, then >> > don't code anything, period. My understanding is that domain only >> > needs to be coded if you assign more than one to the same lpar. In >> > our shop, we have only one domain per lpar, and we don't code it in >> > the CSFPRMxx members >> > >> > >> > _______________________________________________________ >> > >> > Dave Jousma >> > Assistant Vice President >> > Mainframe Services >> > [EMAIL PROTECTED] >> > 616.653.8429 >> > >> > >> > -----Original Message----- >> >> >> >> This e-mail transmission contains information that is confidential and may >> be privileged. It is intended only for the addressee(s) named above. If >> you receive this e-mail in error, please do not read, copy or disseminate it >> in any manner. If you are not the intended recipient, any disclosure, >> copying, distribution or use of the contents of this information is >> prohibited. Please reply to the message immediately by informing the sender >> that the message was misdirected. After replying, please erase it from your >> computer system. Your assistance in correcting this error is appreciated. >> >> ---------------------------------------------------------------------- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO >> Search the archives at http://bama.ua.edu/archives/ibm-main.html >> >> > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, >send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO >Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
