Hi, Stephen.
There is a difference between the cryptographic co-processors IBM
provides as cryto-accelerators in the z9-z10 hardware and the CP Assist
for Cryptographic Function (CPACF) features. The cryptographic
accelerators are very fast cryptographic hardware designed to accelerate
the performance of the complex RSA cryptographic operations used with
the Secure Sockets Layer (SSL) and Transport Layer Security (TLS)
protocols supporting e-business.
CP Assist for Cryptographic Function (CPACF) provides support for a set
of symmetric cryptographic functions such as DES, TDES and SHA1, with a
'key in the clear' interface, via the KM and/or the KMC hardware
instructions. These cryptographic functions are aimed at encryption,
decryption and hashing of data transferred over open networks and data
sent to storage.
To the best of my knowledge, z/VM provides no command to query if your
processor has the CPACF instructions available or not. I do have a
routine here I would be happy to share with you that will detect if
those instructions are available, and, if so, tell you what options they
support.
Have a good one.
On 12/07/2009 12:17 PM, Gentry, Stephen wrote:
I'm trying to determine if a backup utility is using CPACF. The utility
says it is, but CPU utilization implies, to me, that it isn't.
The results I get when I issue a QUERY CRYPTO command:
q crypto
Crypto Adjunct Processor Instructions are not installed
Ready;
q crypto dom
No CAM or DAC Crypto Facilities are installed
Crypto Adjunct Processor Instructions are not installed
Ready;
q crypto cam
No CAM or DAC Crypto Facilities are installed
Crypto Adjunct Processor Instructions are not installed
Ready;
q crypto ap
Crypto Adjunct Processor Instructions are not installed
Ready;
Are there any commands that I can issue that will for sure tell me if
CPACF is being recognized by VM?
We have the feature installed/turned on in our z9 based on a feature
code.
A backup that normally takes 30 minutes, took 13 hours in a test. CPU
utilization stayed about 90% for the duration of the backup.
VM release is 5.4 and current on maintenance. Z9 is a 2096-S01.
Steve
--
Dave Jones
V/Soft
www.vsoft-software.com
Houston, TX
281.578.7544
