z/OS Cryptographic Services ICSF Administrator's Guide
Previous topic | Next topic | Contents | Index | Contact z/OS | Library | PDF


Steps recovering with a CCF (with or without a PCICC)

z/OS Cryptographic Services ICSF Administrator's Guide
SA22-7521-17

If your panel message returns NOT SUCCESSFUL or PPINIT fails to complete, try to:

  1. Delete and reallocate the CKDS
  2. Delete and reallocate the PKDS
  3. Go to the ICSF Coprocessor Management Panel to list the coprocessors and their status:
     CSFCMP00 ---------------- ICSF Coprocessor Management -------------
     COMMAND ===> 
    
    Select the coprocessors to be processed and press ENTER.
    Action characters are: A, D, E, K, R, and S. See the help panel for details.
    
    COPROCESSOR  MODULE ID/SERIAL NUMBER                  STATUS
    -----------  -------------------------------          -------
    
    _ A06                                                  ACTIVE
    _ A07                                                  ACTIVE
    s C0         E589C396944007A6 5D40369997A386F4         ONLINE
    s C1         79BF0AA3D2387960 0367DC04533125FF         ACTIVE_ 
    _ P00        41-00YE1                                  ONLINE
    _ P01        41-00K11                                  ONLINE
    _ P02        41-0A355                                  ONLINE
    _ P03        41-0BA3F                                  ONLINE
    _ P04        41-0RT2T                                  DEACTIVATED
    _ P05        41-00342                                  DISABLED    
     
  4. Make sure that these registers are EMPTY (for C0 and C1): DES new master key register, the current signature master key register (SMK) and the PKA key management master key register (KMMK). On a z900, you should see this:
    Figure 29. Coprocessor Hardware Status Panel
     CSFCMP10 ----------- ICSF - Coprocessor Hardware Status  ----------------
     OPTION ===>
    
                                                           CRYPTO DOMAIN: 0
    
     REGISTER STATUS                COPROCESSOR C0          COPROCESSOR C1
                                                            More:    + 
     Crypto Serial Number or         : E589C396944007A6    79BF0AA3D2387960 
          Module Id                  : 5D40C39997A396F0    0367DC04533125FF 
     Status                          : ONLINE               ACTIVE            
    DES/Symmetric-Keys Master Key                                              
      New master key register        : EMPTY                EMPTY          
        Verification pattern         :      
        Hash pattern                 :     
                                     :     
      Old master key register        : EMPTY                EMPTY                
        Verification pattern         :                                         
        Hash pattern                 :                                         
                                     :                                         
      Current master key register    : VALID                VALID              
        Verification pattern         : CA6B408A02371B1D     261AAB8A02371705   
        Hash pattern                 : 41DF774FF81547D0     562A5202F8154331   
                                     : 090ABC4539727511     4093990AB1202451   
    PKA Signature/Asymmetric-Keys Master Key                                 
      New master key register        : N/A                  N/A         
        Hash pattern                 :                        
                                     :                       
      Old master key register        : N/A                  N/A              
        Hash pattern                 :                                       
                                     :                                       
      Current master key register    : EMPTY                EMPTY              
        Hash pattern                 :   
                                     :    
    PKA Key Management Master Key register                                   
        Hash pattern                 : EMPTY                EMPTY                
                                     :                       
    Special Secure Mode              : Enabled              Enabled                
    Environment Control Mask         : FBFEFCF0             FBFEFCF0               
    Crypto Configuration Control     : EF569412CD91AB78     EF569412CD91AB78       
                                     : 1F25A78BC88ED77A     1F25A78BC88ED77A      
    
    
     Press ENTER to refresh the hardware status display.
     Press END   to exit to the previous menu.
     
  5. If the registers are not EMPTY, go to Entering master key parts. Reset the registers that are not EMPTY. Be sure to check both C0 and C1.
  6. If you have one or more PCICCs, there is no checking to be done.
  7. Rerun PPINIT.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014