RS, what do you mean by 'setup lpar in advance?' We will be doing a scheduled IPL this weekend so I have an opportunity should I need to make a config change.
Thanks Matt -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of R.S. Sent: Wednesday, October 19, 2016 12:18 PM To: [email protected] Subject: Re: Implementing ICSF - FOTS1949 PRNG is not seeded Whole ICSF setup, including Master Key introduction can be done without IPL. However you have to set up the LPAR in advance. Those changes can be done dynamically or ...Activate will be required. In the last case IPL is a result. -- Radoslaw Skorupka Lodz, Poland W dniu 2016-10-19 o 17:46, Mark Jacobs - Listserv pisze: > Unless you have a TKE, you will have to use the ICSF panels to enter > the master keys. So yes, you'll need to IPL each image to do so. Just > a heads up that if you perform ICSF Master Key changes (recommended), > you might have to first enter the previous set of keys, then the > current set. I can elaborate on why if you'd like. > > Mark Jacobs > >> Jesse 1 Robinson <mailto:[email protected]> >> October 19, 2016 at 11:41 AM >> We are installing a z13s and going through preliminary setup. When >> selecting the Crypto tab in an Image profile, I was a bit alarmed by >> this message: >> >> Attention: You must install the 'IBM CP Assist for Cryptographic >> Functions' >> (CPACF) feature if a cryptographic candidate is selected from the >> list box. >> Otherwise, some functions of Integrated Cryptographic Service >> Facility (ICSF) may fail. >> >> I spoke to the person who created and placed the order. He assured me >> that CPACF had been ordered and that no one he talked to believed >> that it requires explicit 'activation'. So I went to a z12 that has >> been in service for years. I see the same warning message on the >> Crypto tab. So it appears to be standard boilerplate that does not >> reflect the status of CPACF. >> >> We're still exploring how to set the Master Key. We had thought that >> it was an HCM task, but now we're led to believe that it's done >> through ICSF. Which means that we have to IPL (each?) LPAR in order >> to set it. The guy who did this for years is gone. >> >> . >> . >> J.O.Skip Robinson >> Southern California Edison Company >> Electric Dragon Team Paddler >> SHARE MVS Program Co-Manager >> 323-715-0595 Mobile >> 626-302-7535 Office >> [email protected] >> >> >> -----Original Message----- >> From: IBM Mainframe Discussion List [mailto:[email protected]] >> On Behalf Of Kirk Wolf >> Sent: Wednesday, October 19, 2016 8:20 AM >> To: [email protected] >> Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded >> >> Right. I've never seen this particular error caused by a missing >> CPACF feature. >> More likely either ICSF is not started or the correct userids do not >> have access to the necessary ICSF features via SAF/RACF. >> >> Kirk Wolf >> Dovetailed Technologies >> http://dovetail.com >> --- Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku. This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorized to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive. mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa, www.mBank.pl, e-mail: [email protected] Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, nr rejestru przedsibiorców KRS 0000025237, NIP: 526-021-50-88. Wedug stanu na dzie 01.01.2016 r. kapita zakadowy mBanku S.A. (w caoci wpacony) wynosi 168.955.696 zotych. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
