Whole ICSF setup, including Master Key introduction can be done without IPL.
However you have to set up the LPAR in advance. Those changes can be
done dynamically or ...Activate will be required. In the last case IPL
is a result.
--
Radoslaw Skorupka
Lodz, Poland
W dniu 2016-10-19 o 17:46, Mark Jacobs - Listserv pisze:
Unless you have a TKE, you will have to use the ICSF panels to enter
the master keys. So yes, you'll need to IPL each image to do so. Just
a heads up that if you perform ICSF Master Key changes (recommended),
you might have to first enter the previous set of keys, then the
current set. I can elaborate on why if you'd like.
Mark Jacobs
Jesse 1 Robinson <mailto:jesse1.robin...@sce.com>
October 19, 2016 at 11:41 AM
We are installing a z13s and going through preliminary setup. When
selecting the Crypto tab in an Image profile, I was a bit alarmed by
this message:
Attention: You must install the 'IBM CP Assist for Cryptographic
Functions'
(CPACF) feature if a cryptographic candidate is selected from the
list box.
Otherwise, some functions of Integrated Cryptographic Service
Facility (ICSF) may fail.
I spoke to the person who created and placed the order. He assured me
that CPACF had been ordered and that no one he talked to believed
that it requires explicit 'activation'. So I went to a z12 that has
been in service for years. I see the same warning message on the
Crypto tab. So it appears to be standard boilerplate that does not
reflect the status of CPACF.
We’re still exploring how to set the Master Key. We had thought that
it was an HCM task, but now we're led to believe that it's done
through ICSF. Which means that we have to IPL (each?) LPAR in order
to set it. The guy who did this for years is gone.
.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-302-7535 Office
robin...@sce.com
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
On Behalf Of Kirk Wolf
Sent: Wednesday, October 19, 2016 8:20 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: (External):Re: Implementing ICSF - FOTS1949 PRNG is not seeded
Right. I've never seen this particular error caused by a missing
CPACF feature.
More likely either ICSF is not started or the correct userids do not
have access to the necessary ICSF features via SAF/RACF.
Kirk Wolf
Dovetailed Technologies
http://dovetail.com
---
Tre tej wiadomoci moe zawiera informacje prawnie chronione Banku
przeznaczone wycznie do uytku subowego adresata. Odbiorc moe by jedynie
jej adresat z wyczeniem dostpu osób trzecich. Jeeli nie jeste adresatem
niniejszej wiadomoci lub pracownikiem upowanionym do jej przekazania
adresatowi, informujemy, e jej rozpowszechnianie, kopiowanie, rozprowadzanie
lub inne dziaanie o podobnym charakterze jest prawnie zabronione i moe by
karalne. Jeeli otrzymae t wiadomo omykowo, prosimy niezwocznie
zawiadomi nadawc wysyajc odpowied oraz trwale usun t wiadomo
wczajc w to wszelkie jej kopie wydrukowane lub zapisane na dysku.
This e-mail may contain legally privileged information of the Bank and is
intended solely for business use of the addressee. This e-mail may only be
received by the addressee and may not be disclosed to any third parties. If you
are not the intended addressee of this e-mail or the employee authorized to
forward it to the addressee, be advised that any dissemination, copying,
distribution or any other similar activity is legally prohibited and may be
punishable. If you received this e-mail by mistake please advise the sender
immediately by using the reply facility in your e-mail software and delete
permanently this e-mail including any copies of it either printed or saved to
hard drive.
mBank S.A. z siedzib w Warszawie, ul. Senatorska 18, 00-950 Warszawa,
www.mBank.pl, e-mail: kont...@mbank.pl
Sd Rejonowy dla m. st. Warszawy XII Wydzia Gospodarczy Krajowego Rejestru
Sdowego, nr rejestru przedsibiorców KRS 0000025237, NIP: 526-021-50-88.
Wedug stanu na dzie 01.01.2016 r. kapita zakadowy mBanku S.A. (w caoci
wpacony) wynosi 168.955.696 zotych.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
