Hi Bob,
We checked this out long ago and haven't tried it since so I thought I would
revisit.
I think I found a bug.
Server on a zEC12 with crypto accelerator
zlinux-maint:~ # lszcrypt
card2b: CEX4A
Reports
zlinux-maint:~ # lnxhc run crypto_opencryptoki_ckc -V
Collecting system information
Host 'zlinux-maint'
file::/proc/cpuinfo
[SUCCESS]
program::/bin/rpm -qa
--queryformat='%{name}-%{version}-%{release}.%{arch}\n'
[SUCCESS]
program::/sbin/lszcrypt
[SUCCESS]
program::/usr/sbin/pkcsconf -t
[SUCCESS]
program::ls /dev/z90crypt
[SUCCESS]
Running checks (1 checks)
CHECK NAME HOST
RESULT
========================================================================================================================================
crypto_opencryptoki_ckc ................ zlinux-maint
EXCEPTION-MED
>EXCEPTION crypto_opencryptoki_ckc.crypto_adapters_not_available(medium)
SUMMARY
Required cryptographic adapters are not available (Cryptographic
Coprocessor, Cryptographic Accelerator)
But server on an z196
pippin:~ # lszcrypt
card24: CEX4A
Reports
pippin:~ # lnxhc run crypto_opencryptoki_ckc -V
Collecting system information
Host 'pippin'
file::/proc/cpuinfo
[SUCCESS]
program::/bin/rpm -qa
--queryformat='%{name}-%{version}-%{release}.%{arch}\n' [SUCCESS]
program::/sbin/lszcrypt
[SUCCESS]
program::/usr/sbin/pkcsconf -t
[SUCCESS]
program::ls /dev/z90crypt
[SUCCESS]
Running checks (1 checks)
CHECK NAME HOST
RESULT
=====================================================================================================
crypto_opencryptoki_ckc ................ pippin
EXCEPTION-HIGH
>EXCEPTION crypto_opencryptoki_ckc.ica_token_not_configured(high)
SUMMARY
The ICA token is not configured, cryptographic hardware cannot be exploited
for clear key
cryptography
Which is true, it is not configured on this server.
Marcy
-----Original Message-----
From: Linux on 390 Port [mailto:[email protected]] On Behalf Of Robert
Abrams
Sent: Thursday, November 13, 2014 8:14 AM
To: [email protected]
Subject: [LINUX-390] Do you use the Linux Health Checker?
Do you use the Linux Health Checker?
The Linux Health Checker has been available as a separate download via
http://lnxhc.sf.net ... some installations use it, some don't, some may be
unaware of it.
Please take a couple minutes to complete a brief survey at
http://ibm.biz/BdEPTq to help IBM understand its usage and ways in which it
could be improved for Availability checking and Problem Determination
assistance.
Thanks, Bob Abrams
IBM, System z Design/Development - RAS, Problem Determination, Availability
Management [email protected] IBM Poughkeepsie, NY
(845) 435-6832
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions, send email to
[email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit http://wiki.linuxvm.org/
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit
http://wiki.linuxvm.org/