Some flavors of crypto require injection of a master key before it will come active. Of course, the master key has to match the one that was injected into the other machine.
-----Original Message----- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Alan Scott Sent: Wednesday, March 11, 2009 1:34 PM To: IBM-MAIN@bama.ua.edu Subject: z890 crypto vs z900 crypto My team is at a bi-yearly coop test. We have been given a z900 to test on. Our system is a z890 w/o optional PCI crypto. We do have the feature 3863 enabled so we can use the crypto that is built in to the z890. We only need the crypto for SSL TN3270 and FTP/SSL. At coop on thier z900, our system ssl is telling us that crypto is not available. The coop site se's do not know why. The z900 that we are testing on does have the optional PCI crypto engines installed. We do not run ICSF. Never found a need for it. Does anyone know why this LPAR on the z900 will not run system ssl? NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html