Same here. My one and only priority 1 issue with IBM. When the z9BC was brand new, I defined all 4 crypto cards as accelerators. Couldn't define my master keys or get SSL working. (It had been working on the z800-0B1) We elected to go forward with the processor upgrade that Saturday. And I called IBM, told them priority 1 and that I couldn't go into operation on Monday without security.
The answer was to redefine at least one crypto co-processor. > -----Original Message----- > From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On > Behalf Of Carmen Vitullo > Sent: Thursday, July 16, 2020 11:05 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: ICSF -- initializing a PKDS > > It's been a long time since I've INIT'd a PKDS, my config had a co processor > installed and I had to have CSF running to INIT a PKDS and store the DES > master key > did you start CSF? > > > Carmen Vitullo > > ----- Original Message ----- > > From: "John McKown" <john.archie.mck...@gmail.com> > To: IBM-MAIN@LISTSERV.UA.EDU > Sent: Thursday, July 16, 2020 12:45:16 PM > Subject: ICSF -- initializing a PKDS > > This is for a very old z/OS 1.12 system running on a z9BC. CPACF is enabled > in the machine. There are no cryptographic coprocessors installed. I can > initialize the CKDS using the panel. But when I try to initialize the PKDS, > the panel displays "OPTION NOT ACTIVE". PF1 displays 'THE SELECTED PANEL > OPTION IS NOT AVAILABLE WITH YOUR CURRENT SYSTEM CONFIGURATION" > > Is this normal? Can I not use the PKDS on a system with only CPACF? Or do I > need to enable some other option somewhere? > > Thanks. > > -- > People in sleeping bags are the soft tacos of the bear world. > Maranatha! <>< > John McKown > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
