It only very recently that CPACF does any processing for asymmetric keys. Remember that if you initialise a CKDS using CPACF, you cannot subsequently convert the CKDS to a protected key CKDS.
You could always look at the old Redbook for Crypto n the z9 SG24-7123-00. 😉. Lennie Dymoke-Bradshaw Consultant working on contract for ‘Dance like no one is watching. Encrypt like everyone is.’ -----Original Message----- From: IBM Mainframe Discussion List <[email protected]> On Behalf Of John McKown Sent: 16 July 2020 18:45 To: [email protected] Subject: [IBM-MAIN] ICSF -- initializing a PKDS This is for a very old z/OS 1.12 system running on a z9BC. CPACF is enabled in the machine. There are no cryptographic coprocessors installed. I can initialize the CKDS using the panel. But when I try to initialize the PKDS, the panel displays "OPTION NOT ACTIVE". PF1 displays 'THE SELECTED PANEL OPTION IS NOT AVAILABLE WITH YOUR CURRENT SYSTEM CONFIGURATION" Is this normal? Can I not use the PKDS on a system with only CPACF? Or do I need to enable some other option somewhere? Thanks. -- People in sleeping bags are the soft tacos of the bear world. Maranatha! <>< John McKown ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
