> -----Original Message-----
> From: IBM Mainframe Discussion List On Behalf Of Mark Zelden
>
> On Tue, 27 Nov 2007 15:16:56 -0600, McKown, John
> <[EMAIL PROTECTED]> wrote:
>
> >> -----Original Message-----
> >> From: IBM Mainframe Discussion List On Behalf Of Chase, John
> >>
> >>[ snip ]
> >>
> >> CSFM001I ICSF INITIALIZATION COMPLETE
> >>
> >> CSFM400I CRYPTOGRAPHY - SERVICES ARE NOW AVAILABLE.
> >>
> >>
> >> Next step, according to the ICSF Admin Guide, is to initialize the
> >> CKDS with a master key. The manual says to invoke the PPINIT
utility
> >> for this, but instead of the "next panel" shown in the manual, I
get
> >> "OPTION NOT ACTIVE" in the message area. I've retraced all the
steps
> >> I took to get to "here", and cannot see that I missed any.
> >>
> >> Any ideas how to proceed from "here"? Running z/OS 1.7, BTW.
> >>
> >> TIA,
> >>
> >> -jc-
> >
> >I've been stuck at that same point too. Hopefully there is somebody
who
> >can tell us both how to continue.
> >
>
>
> John / John,
>
> Do either of you have any Crypto hardware? Although CPACF
> must be enabled, it is an assist processor physically
> embedded on each Central Processor (CP) (free). No master
> keys are needed to use the (clear key) CPACF assists.
We have CPACF only; no CEX2As or CEX2Cs (yet).
It would be nice if the manuals would say that we need go no further
until one or more CEX2x cards are installed.
> The last redbook I have that may be of some help to explain
> this stuff is "z9-109 Crypto and TKE V5 Update" SG24-7123-00
> (Dec. 2005).
> There may be something more current...
I'll have a look at that tomorrow.
Thanks,
-jc-
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
