Steve,
You should read up on the HMC configuation of the CRYPTO processors. Maybe a
Redbook too.
As I recall, (old memories), they are not able to be brought online until they
have been configured though I could be mistaken.
VM directory statements of interest: for LPAR LPA7.
CRYPTO APVIRT
CRYPTO DOMAIN 7
CRYPTO DOMAIN 14
CRYPTO DOMAIN 15
Watch the wrap.
-----------------------------------------------------------------------------------------------------------------------------------
Z9 FEATURE = 0863 CRYPTO EXPRESS2. EACH FEATURE HAS 2 PCHID'S OR
PROCESSORS. EACH PROCESSOR CAN BE CONFIGURED
AS EITHER A 'COPROCESSOR' OR
'ACCELERATOR'.
EACH FEATURE CONSUMES TWO (2) PCHID'S
AND ONE SLOT.
EACH 'COPROCESSOR/ACCELERATOR' HAS 16 SETS OF REGISTERS (WE WILL CALL EACH
REGISTER SET A 'QREG SET').
FOR NOW, 'DOMI(..)' MEANS BOTH CONTROL DOMAIN INDEX AND USAGE INDEX.
-----------------------------------------------------------------------------------------------------------------------------------
PCI-X ADAPTER # | PROCESSOR TYPE |DOMI |DOMI |DOMI |DOMI |DOMI |DOMI |DOMI
|DOMI |DOMI |DOMI |DOMI |DOMI |DOMI |DOMI |DOMI |DOMI |
AND PCHID(NNNN) | |(00) |(01) |(02) |(03) |(04) |(05) |(06)
|(07) |(08) |(09) |(10) |(11) |(12) |(13) |(14) |(15) |
-----------------------------------------------------------------------------------------------------------------------------------
00 PCHID(0300) | COPROCESSOR | | | | | | | |
|ZNAL |ZNAL | | | | | | |
| | |LPB1 |LPA2 |LPB3 |LPB4 |LPA5 |LPA6
|LPA7 |LPB8 |LPB9 |LPAA | | | |LPA7 |LPA7 |
-----------------------------------------------------------------------------------------------------------------------------------
01 PCHOD(0301) | ACCELERATOR | | | | | | | |
|ZNAL |ZNAL | | | | | | |
| | |LPB1 |LPA2 |LPB3 |LPB4 |LPA5 |LPA6
|LPA7 |LPB8 |LPB9 |LPAA | | | |LPA7 |LPA7 |
-----------------------------------------------------------------------------------------------------------------------------------
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
02 PCHID(0110) | COPROCESSOR | | | | | | | |
|ZNAL |ZNAL | | | | | | |
| | |LPB1 |LPA2 |LPB3 |LPB4 |LPA5 |LPA6
|LPA7 |LPB8 |LPB9 |LPAA | | | |LPA7 |LPA7 |
-----------------------------------------------------------------------------------------------------------------------------------
03 PCHOD(0111) | ACCELERATOR | | | | | | | |
|ZNAL |ZNAL | | | | | | |
| | |LPB1 |LPA2 |LPB3 |LPB4 |LPA5 |LPA6
|LPA7 |LPB8 |LPB9 |LPAA | | | |LPA7 |LPA7 |
-----------------------------------------------------------------------------------------------------------------------------------
Regards, Doug
----- Original Message -----
From: "Gentry, Stephen" <stephen.gen...@lafayettelife.com>
To: <IBMVM@LISTSERV.UARK.EDU>
Sent: Monday, December 07, 2009 14:19
Subject: Re: CPACF and z/VM
Hmm, interesting comment, have I re-IPL'd. The z9 was shipped with the
feature code. We've had it for quite a while and have IPL'd numerous
times. This then leads me to believe that I have to do something in the
LPAR definition on the HMC? I have looked at the activation profile for
our LPAR and there is a CRYPTO link. Clicking on that, I see that no
boxes are checked. This is where the doc get's confusing. Am I
supposed to check mark some boxes if I have CPACF? The way the doc
reads, leads me to think you only use these options if you have the full
blown crypto card installed in the box. That being said, where can I
find some doc. etc. that more or less gives a step by step walk through
of what to do?
The guest reports that CRYPTO hardware assist is available. But I don't
know how/what it is checking. Is it checking for the feature? Yes,
that's installed. Is it active for the LPAR? I don't know, I don't
think so (depends on your reply to the LPAR question above.)
Thanks.
-----Original Message-----
From: The IBM z/VM Operating System [mailto:ib...@listserv.uark.edu] On
Behalf Of Alan Altmark
Sent: Monday, December 07, 2009 2:03 PM
To: IBMVM@LISTSERV.UARK.EDU
Subject: Re: CPACF and z/VM
On Monday, 12/07/2009 at 01:17 EST, "Gentry, Stephen"
<stephen.gen...@lafayettelife.com> wrote:
> I?m trying to determine if a backup utility is using CPACF. The
utility
says
> it is, but CPU utilization implies, to me, that it isn?t.
>
> The results I get when I issue a QUERY CRYPTO command:
> q crypto
> Crypto Adjunct Processor Instructions are not installed
> Ready;
This says that the CPU Cryptographic Assist (Crypto+MSA) feature is not,
in fact, active in the LPAR.
> Are there any commands that I can issue that will for sure tell me if
CPACF is
> being recognized by VM?
You already found it: Query Crypto
> We have feature installed/turned on on our z9 based on a feature code.
>From this I infer that you have not re-IPLed z/VM since you activated
the
feature code.
> A backup that normally takes 30 minutes, took 13 hours in a test. CPU
> utilization stayed about 90% for the duration of the backup.
>
> VM release is 5.4 and current on maintenance. Z9 is a 2096-S01.
If you want to find out if a guest is using the CPACF instructions, ask
the guest. It may be reporting its intent in startup messages.
Alternatively, you can use brute force and trace the CIPHER MESSAGE,
etc.
instruction opcodes to see if the guest is issuing them.
Alan Altmark
z/VM Development
IBM Endicott
