As Radoslaw points out, your crypto cards will now be CEX5s vs the cards on your z196 which doesn't support the CEX5, and you'll need to make sure that the version of ICSF that you are running supports, or at least tolerates the CEX5s. HCR77B0 introduced support for CEX5s. If you're running an older level, then look for the Coexistence APARs for the level of ICSF that you'll be running on the z13. I don't know of any functionality that was dropped with the CEX5s, so you probably don't need to worry about that, especially if you're not going to a new level of ICSF during the migration.
If you're doing a push-pull, then you'll be using the same keystores on the new system, so it's simply a matter of getting your master keys loaded into the new hardware. If you're not doing a push-pull, then you'll use IDCAMS or your backup/restore utilities to simply copy those keystores to the new DASD before loading the same master keys. In either case, you'll load the master keys using the exact same process as when you loaded them on the z196: If you used PPINIT (Passphrase Initialization) on the z196, then you'll use PPINIT and the exact same passphrase on the z13. But use the 'Reinitialize system' option since you don't need to initialize the keystores. Reinit will load the master key material into the CEX cards after calculating the values from the passphrase. It will also verify that the MKVPs of the calculated master keys match the MKVPs in the header record of the keystores. If you used the ICSF panels to load key parts, then you'll use the ICSF panels to load those exact same key parts on the new machine. Then you'll use the KDS management panels to move those master keys from the new master key registers to the current master key registers. As with PPINIT, ICSF will validate that the MKVPs of these master keys match the MKVPs in the header record of the keystores. And if you used a TKE on the original system, then you'll need to upgrade to TKE V8 and use that TKE to load your key material. If this is the case, then I would suggest first upgrading your TKE to V8 on the z196 and then use the migration wizard on the TKE. Greg Boyd Mainframe Crypto www.mainframecrypto.com ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
