Skip - Check the web pages I left behind. Instructions for setting the keys through the ICSF panels are in there.
On 10/19/2016 08:41 AM, Jesse 1 Robinson wrote: > We are installing a z13s and going through preliminary setup. When selecting > the Crypto tab in an Image profile, I was a bit alarmed by this message: > > Attention: You must install the 'IBM CP Assist for Cryptographic Functions' > (CPACF) feature if a cryptographic candidate is selected from the list box. > Otherwise, some functions of Integrated Cryptographic Service Facility (ICSF) > may fail. > > I spoke to the person who created and placed the order. He assured me that > CPACF had been ordered and that no one he talked to believed that it requires > explicit 'activation'. So I went to a z12 that has been in service for years. > I see the same warning message on the Crypto tab. So it appears to be > standard boilerplate that does not reflect the status of CPACF. > > We’re still exploring how to set the Master Key. We had thought that it was > an HCM task, but now we're led to believe that it's done through ICSF. Which > means that we have to IPL (each?) LPAR in order to set it. The guy who did > this for years is gone. > > . > . > J.O.Skip Robinson > Southern California Edison Company > Electric Dragon Team Paddler > SHARE MVS Program Co-Manager > 323-715-0595 Mobile > 626-302-7535 Office > [email protected] > > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] On > Behalf Of Kirk Wolf > Sent: Wednesday, October 19, 2016 8:20 AM > To: [email protected] > Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded > > Right. I've never seen this particular error caused by a missing CPACF > feature. > More likely either ICSF is not started or the correct userids do not have > access to the necessary ICSF features via SAF/RACF. > > Kirk Wolf > Dovetailed Technologies > http://dovetail.com > > On Wed, Oct 19, 2016 at 10:13 AM, R.S. <[email protected]> > wrote: > >> W dniu 2016-10-19 o 17:05, John Eells pisze: >> >>> R.S. wrote: >>> <snip> >>> >>>> Double click on CPC icon. Instance Information tab, bottom right >>>> corner "CP Assist for Crypto functions: >>>> Installed". >>>> >>> Note also that CPACF is a feature, so if it's not installed >>> (enabled), you need to order the feature to get it installed. >>> (Whether its enablement or lack thereof matters in this context, I >>> have no clue.) >>> >>> Isn't it enabled by default for all customers except North Korea ? >>> ;-) >> -- >> Radoslaw Skorupka >> Lodz, Poland > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
