Thanks to Stuart for pointing me to his doc. ;-) Radoslaw, you said in one post that the whole thing can be done ahead of time, but your latest post mentions only LPAR Image profile setup on HMC. Mike Ward (and Stuart's doc) refer to ICSF, which requires an OS, that is, IPL. Ours is a push-pull installation. New box cannot even be cabled up until the old one is brought down. It should not take long to run ICSF on each LPAR, but I'd prefer to take care of it in advance if possible. Otherwise it will just have to be part of the install.
One extra complication. This is our DR machine. There are a few LPARs that run all the time, but most come up only during DR testing. I take it we need to bring up DR systems for ICSF master key... . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 323-715-0595 Mobile 626-302-7535 Office [email protected] -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of R.S. Sent: Wednesday, October 19, 2016 1:12 PM To: [email protected] Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded W dniu 2016-10-19 o 20:36, Dazzo, Matt pisze: > RS, what do you mean by 'setup lpar in advance?' We will be doing a scheduled > IPL this weekend so I have an opportunity should I need to make a config > change. > Well, Customize Activation Profiles, LPAR profile, Crypto tab. You have to set up some values for two things: Crypto Domain. Assign one "Control and Usage domain". Unique one. Use the same domain if CSFPRMxx (or just leave it default). Assigned Cryptos Assign all existing CryptoExpress cards as Candidate and Online. Note: this is simple configuration, one of many possible. Details are more complex and depend on many factors. When teaching this I spent few hours on that. :-) -- Radoslaw Skorupka Lodz, Poland ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
