If you have a TKE, then you can load it in advance. If not then your only option is to use the ISPF based ICSF panels.
_________________________________________________________________ Dave Jousma Manager Mainframe Engineering, Assistant Vice President [email protected] 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f 616.653.2717 -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Jesse 1 Robinson Sent: Thursday, October 20, 2016 11:06 AM To: [email protected] Subject: Re: Implementing ICSF - FOTS1949 PRNG is not seeded Thanks. I'm on board except for this statement. "You can do [the Master Key] in advance or during DR IPL." What is "in advance"? These systems are IPLed only in DR (test) mode. Is there any alternative to actual IPL? . . J.O.Skip Robinson Southern California Edison Company Electric Dragon Team Paddler SHARE MVS Program Co-Manager 323-715-0595 Mobile 626-302-7535 Office [email protected] -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of R.S. Sent: Thursday, October 20, 2016 1:33 AM To: [email protected] Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded W dniu 2016-10-19 o 23:22, Jesse 1 Robinson pisze: > Thanks to Stuart for pointing me to his doc. ;-) > > Radoslaw, you said in one post that the whole thing can be done ahead of > time, but your latest post mentions only LPAR Image profile setup on HMC. > Mike Ward (and Stuart's doc) refer to ICSF, which requires an OS, that is, > IPL. Ours is a push-pull installation. New box cannot even be cabled up until > the old one is brought down. It should not take long to run ICSF on each > LPAR, but I'd prefer to take care of it in advance if possible. Otherwise it > will just have to be part of the install. To clarify: Typical scenario is the following: CPACF is enabled by IBM Sysprog decide in what mode the crypto cards should work. There 3 modes: Accelerator, CCA coprocessor and EP11 coprocessor. Sysprog create Image (LPAR) profiles on HMC, with unique domains. That's all from H/W point of view. Now you can IPL the system and all remaining activity to customize ICSF do not require IPL. Things may be more complex if you didn't do the H/W preparation and have running systems. > One extra complication. This is our DR machine. There are a few LPARs that > run all the time, but most come up only during DR testing. I take it we need > to bring up DR systems for ICSF master key... For the DR system the simplest approach is to enter the same Master Key. You can do it in advance or during DR IPL. HTH -- Radoslaw Skorupka Lodz, Poland ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
