Hello Radoslaw, thanks for your feedback
> QUESTIONS: -------------- > > 1. Does ICSF TSO panels method mean that the Key Management guys > will have to logon to each lpar and load the new Master keys? Yes. Is it big pain? The Key management are not too happy, but they will just have to adapt life without the TKE workstation. As I said we only have a couple of legacy application crypto keys which are stabilized and we only used TKE to load new MK when we install a new machine. > 2. Could we alternatively use the “pass phrase initialization > utility” to reduce ICSF set-up time and then use our Change > Management procedures to plan a new MK at a later date? Yes. A person performing the initialization still have to logon on each LPAR. Do you use the "Passphrase Initialization" or "New Master Key entry" method? regards Francis ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
