On Thu, 8 Dec 2022 at 19:22, Timothy Sipples <sipp...@sg.ibm.com> wrote:
> I'm a bit confused. IBM Trusted Key Entry (TKE) Workstation microcode
> updates are performed by an IBM Customer Engineer (CE). If you have
> separation of duties-related concerns that's perfectly fine, but you still
> should have IBM CE assistance available — you can ask the CE, basically,
> and then decide who actually physically performs certain steps. (Recently
> there's also a network-based USB-less microcode update method, but at least
> for now you should still have an IBM CE available with your machine
> warranty/maintenance. On-site, even.)
>
> Part of the TKE microcode upgrade process involves backing up the critical
> parameters and other site/customer-specific data from your TKE Workstation.
> You can back up that data to a USB memory key/drive. But that's a "closed
> loop." The TKE Workstation formats the drive ("TKEDATA" format) for you.
> There's nothing to do on a PC, Mac, or other device.
>
It can't be 100% closed or no updates would ever get done. Somehow the new
code has to get into the TKE box. If not from a USB device (and not
necessarily from the network), then what?
> Am I missing anything?
>
The piece I'm missing is that Radoslaw evidently *has* the microcode on a
Windows machine, and wants to apply it. How it got there is a good
question. Are you and others saying that those USB sticks physically come
from IBM ("the factory") formatted in some proprietary way that Windows
can't even see? Does the CE (wow - I remember when we all had at least one
on-site...) have Windows/Unix tools to write to these USB sticks, or do
they have to come ready-to-go from IBM Central?
Tony H.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
