Re: ICSF crypto domain sharing

2018-10-02 Thread Frank Swarbrick
We're sharing keys between dev and sandbox, not dev and prod. Thanks for the info! Frank From: IBM Mainframe Discussion List on behalf of R.S. Sent: Sunday, September 30, 2018 12:41 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ICSF crypto domain sharing Frank

Re: ICSF crypto domain sharing

2018-09-30 Thread R.S.
uot; the same domain. But I still wondered if the latter could be done. It sounds like you are saying no. From: IBM Mainframe Discussion List on behalf of R.S. Sent: Friday, September 28, 2018 8:43 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ICSF crypto do

Re: ICSF crypto domain sharing

2018-09-28 Thread Carmen Vitullo
panel) the master key is now set and the new CKDS is now the active CKDS. Carmen Vitullo - Original Message - From: "Frank Swarbrick" To: IBM-MAIN@LISTSERV.UA.EDU Sent: Friday, September 28, 2018 1:41:02 PM Subject: Re: ICSF crypto domain sharing We unfortunately

Re: ICSF crypto domain sharing

2018-09-28 Thread Frank Swarbrick
lf of Jousma, David <01a0403c5dc1-dmarc-requ...@listserv.ua.edu> Sent: Friday, September 28, 2018 9:03 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ICSF crypto domain sharing Radoslaw. OK, you made me go look at the IMAGE profiles for my PROD systems. We have 3 PROD systems on a single CPC. My

Re: ICSF crypto domain sharing

2018-09-28 Thread Frank Swarbrick
Mainframe Discussion List on behalf of R.S. Sent: Friday, September 28, 2018 8:43 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ICSF crypto domain sharing W dniu 2018-09-28 o 12:54, Jousma, David pisze: > Yes, they can be shared. Our PROD lpars are all on the same domain. IMHO no, d

Re: ICSF crypto domain sharing

2018-09-28 Thread R.S.
W dniu 2018-09-28 o 17:03, Jousma, David pisze: Radoslaw. OK, you made me go look at the IMAGE profiles for my PROD systems. We have 3 PROD systems on a single CPC. My recollection was incorrect, and should have looked before I replied. We have 3 domains, one for each prod lpar assigned

Re: ICSF crypto domain sharing

2018-09-28 Thread Jousma, David
- From: IBM Mainframe Discussion List On Behalf Of R.S. Sent: Friday, September 28, 2018 10:43 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: ICSF crypto domain sharing **CAUTION EXTERNAL EMAIL** **DO NOT open attachments or click on links from unknown senders or unexpected emails** W dniu 2018-09

Re: ICSF crypto domain sharing

2018-09-28 Thread R.S.
W dniu 2018-09-28 o 12:54, Jousma, David pisze: Yes, they can be shared. Our PROD lpars are all on the same domain. IMHO no, domains cannot be shared. Maybe your prod LPARs reside on different CPC each? Some remarks: 1. Single LPAR can have more than one domain, but z/OS ICSF can use only

Re: ICSF crypto domain sharing

2018-09-28 Thread Jousma, David
Yes, they can be shared. Our PROD lpars are all on the same domain. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Frank Swarbrick Sent: Thursday, September 27, 2018 5:38 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: ICSF crypto domain sharing **CAUTION EXTERNAL EMAIL

Re: ICSF crypto domain sharing

2018-09-27 Thread Mark Jacobs - Listserv
Looks like it; * Greater than 16 Domain support * – Support to allow a cryptographic coprocessor to be shared across more than 16 domains, up to the maximum number of LPARs on the system. * – This support relies on enhanced firmware available with a minimum microcode

ICSF crypto domain sharing

2018-09-27 Thread Frank Swarbrick
Can two different LPARs share the same domain (and obviously the same keys), or do the keys have to be loaded for each LPAR separately, even when they are the same? -- For IBM-MAIN subscribe / signoff / archive access