Do you have (or had) any users in the directory with CRYPTO DOMAIN x APDED in their directory entry? One a crypto queue is dedicated, that can't be reversed without a system IPL. Usage note 9 under the CRYPTO statement for the directory states: "If major changes are made to the configuration of the PCI crypto queues by updating the APDED and APVIRT operands on the CRYPTO statements for users without a subsequent system IPL, it is possible that no queues of the type selected by z/VM will remain for queue-sharing, even though they may appear to be available when the QUERY CRYPTO APQS command is issued. If it is necessary to change the type of queues available for queue-sharing, a system IPL must be performed after the directory changes are made."
Or, it could be a problem in how you have the crypto defined in the LPAR profile. What kind of machine is this, and what kind of crypto card? On Wed, Apr 8, 2009 at 7:41 AM, Don W. <[email protected]> wrote: > I want to use the CRYPTO APVIRT option in my z/VM 5.3 guest. When I log on > to the guest, I get HCPKFL1719I No AP Crypto Queue is available for shared > use. If I QUERY CRYPT AP, I get: > AP 00 CEX2C Queue 00 is reserved for dedicated use > for every line. I notice when I IPL the system I get the status of busy for > each queue. I must be missing something obvious. How do you change the > status of a crypto queue? Any suggestions? > -- Bruce Hayden Linux on System z Advanced Technical Support IBM, Endicott, NY
