Hello Alan, In order to use crypto hw, it is necessary to have ICSF up and running. In fact, ICSF must be started before TCP/IP during z/OS IPL. TCP/IP checks that ICSF is up just during its start-up. If ICSF is up, it will use the crypto hw, otherwise it will not. Another point to be considered is the WLM Goal for ICSF. It must be better or at least equal to the server (TCP/IP our case) that is going to ask their service. Starting up ICSF will fix your problem. Best Regards,
Vicente Ranieri Jr Technical Sales Support – Latin America GMT -------------------------------------------------------------------------------------------------------- My team is at a bi-yearly coop test. We have been given a z900 to test on. Our system is a z890 w/o optional PCI crypto. We do have the feature 3863 enabled so we can use the crypto that is built in to the z890. We only need the crypto for SSL TN3270 and FTP/SSL. At coop on thier z900, our system ssl is telling us that crypto is not available. The coop site se's do not know why. The z900 that we are testing on does have the optional PCI crypto engines installed. We do not run ICSF. Never found a need for it. Does anyone know why this LPAR on the z900 will not run system ssl? --------------------------------------------------------------------------------------------------------
