John,

Based on the CSFM506I message, it looks like your LPAR does not have any crypto 
hardware as part of its configuration or there is no domain assigned to your 
LPAR for master key processing. Check the configuration of your LPAR from the 
HMC/SE for your CEC and the activation profile for your LPAR.

HITACHI
 DATA SYSTEMS 
Raymond E. Noal 
Senior Technical Engineer 
Office: (408) 970 - 7978 

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of 
Chase, John
Sent: Tuesday, November 27, 2007 1:08 PM
To: [email protected]
Subject: ICSF First-time Startup

Hi, All,

We got the CPACF activated on our z9s this past weekend, and now I'm "in
the midst" of "initializing" ICSF.  So far, I've completed all the steps
outlined in the ICSF Sysprog Guide and have the started task running.
SYSLOG messages are correct for first-time startup in our configuration
with empty CKDS and PKDS, and the related ISPF panels are accessible.

S CSF                                                                  
$HASP100 CSF      ON STCINRDR                                          
IEF695I START CSF      WITH JOBNAME CSF      IS ASSIGNED TO USER STCCSF
 , GROUP STC                                                           
$HASP373 CSF      STARTED                                              
IEF403I CSF - STARTED - TIME=14.01.05                                  
CSFM101E PKA KEY DATA SET, SYS1.CSF.CSFPKDS IS NOT INITIALIZED.        
CSFM506I CRYPTOGRAPHY - THERE IS NO ACCESS TO ANY CRYPTOGRAPHIC        
COPROCESSORS OR ACCELERATORS.                                          
CSFM001I ICSF INITIALIZATION COMPLETE                                  
CSFM400I CRYPTOGRAPHY - SERVICES ARE NOW AVAILABLE.                    

Next step, according to the ICSF Admin Guide, is to initialize the CKDS
with a master key.  The manual says to invoke the PPINIT utility for
this, but instead of the "next panel" shown in the manual, I get "OPTION
NOT ACTIVE" in the message area.  I've retraced all the steps I took to
get to "here", and cannot see that I missed any.

Any ideas how to proceed from "here"?  Running z/OS 1.7, BTW.

TIA,

    -jc-


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to