Thanks - I think I need to read that! One client I work with has CPACF installed with no crypto cards, but no ICSF running. They run SSH uploads hundreds or maybe thousands of times per day, and every day there are a few timeout failures (on their pretty slow z114) while initializing the SSH connection.

My theory is this is because crypto work is all being done in software, and maybe some work could be offloaded to CPACF if I can figure out how to get ICSF running to use it.

Kirk Wolf wrote:
Have you looked at our Quick Start guide for installing and tuning z/OS 2.2
OpenSSH?
https://dovetail.com/docs/pt-quick-inst/index.html

your question I believe is covered in section "1.6 Using ICSF and
/dev/random"

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to