We are installing a z13s and going through preliminary setup. When selecting the Crypto tab in an Image profile, I was a bit alarmed by this message:
Attention: You must install the 'IBM CP Assist for Cryptographic Functions' (CPACF) feature if a cryptographic candidate is selected from the list box. Otherwise, some functions of Integrated Cryptographic Service Facility (ICSF) may fail. I spoke to the person who created and placed the order. He assured me that CPACF had been ordered and that no one he talked to believed that it requires explicit 'activation'. So I went to a z12 that has been in service for years. I see the same warning message on the Crypto tab. So it appears to be standard boilerplate that does not reflect the status of CPACF. We’re still exploring how to set the Master Key. We had thought that it was an HCM task, but now we're led to believe that it's done through ICSF. Which means that we have to IPL (each?) LPAR in order to set it. The guy who did this for years is gone. . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 323-715-0595 Mobile 626-302-7535 Office [email protected] -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Kirk Wolf Sent: Wednesday, October 19, 2016 8:20 AM To: [email protected] Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded Right. I've never seen this particular error caused by a missing CPACF feature. More likely either ICSF is not started or the correct userids do not have access to the necessary ICSF features via SAF/RACF. Kirk Wolf Dovetailed Technologies http://dovetail.com On Wed, Oct 19, 2016 at 10:13 AM, R.S. <[email protected]> wrote: > W dniu 2016-10-19 o 17:05, John Eells pisze: > >> R.S. wrote: >> <snip> >> >>> Double click on CPC icon. Instance Information tab, bottom right >>> corner "CP Assist for Crypto functions: >>> Installed". >>> >> >> Note also that CPACF is a feature, so if it's not installed >> (enabled), you need to order the feature to get it installed. >> (Whether its enablement or lack thereof matters in this context, I >> have no clue.) >> >> Isn't it enabled by default for all customers except North Korea ? >> ;-) > > -- > Radoslaw Skorupka > Lodz, Poland ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
