Thanks. I'm on board except for this statement. "You can do [the Master Key] in advance or during DR IPL." What is "in advance"? These systems are IPLed only in DR (test) mode. Is there any alternative to actual IPL?
. . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 323-715-0595 Mobile 626-302-7535 Office [email protected] -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of R.S. Sent: Thursday, October 20, 2016 1:33 AM To: [email protected] Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded W dniu 2016-10-19 o 23:22, Jesse 1 Robinson pisze: > Thanks to Stuart for pointing me to his doc. ;-) > > Radoslaw, you said in one post that the whole thing can be done ahead of > time, but your latest post mentions only LPAR Image profile setup on HMC. > Mike Ward (and Stuart's doc) refer to ICSF, which requires an OS, that is, > IPL. Ours is a push-pull installation. New box cannot even be cabled up until > the old one is brought down. It should not take long to run ICSF on each > LPAR, but I'd prefer to take care of it in advance if possible. Otherwise it > will just have to be part of the install. To clarify: Typical scenario is the following: CPACF is enabled by IBM Sysprog decide in what mode the crypto cards should work. There 3 modes: Accelerator, CCA coprocessor and EP11 coprocessor. Sysprog create Image (LPAR) profiles on HMC, with unique domains. That's all from H/W point of view. Now you can IPL the system and all remaining activity to customize ICSF do not require IPL. Things may be more complex if you didn't do the H/W preparation and have running systems. > One extra complication. This is our DR machine. There are a few LPARs that > run all the time, but most come up only during DR testing. I take it we need > to bring up DR systems for ICSF master key... For the DR system the simplest approach is to enter the same Master Key. You can do it in advance or during DR IPL. HTH -- Radoslaw Skorupka Lodz, Poland ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
