If your panel message returns NOT SUCCESSFUL or PPINIT
fails to complete, try to:
- Delete and reallocate the CKDS
- Delete and reallocate the PKDS
- Go to the ICSF Coprocessor Management Panel to list the coprocessors
and their status:
CSFCMP00 ---------------- ICSF Coprocessor Management -------------
COMMAND ===>
Select the coprocessors to be processed and press ENTER.
Action characters are: A, D, E, K, R, and S. See the help panel for details.
COPROCESSOR MODULE ID/SERIAL NUMBER STATUS
----------- ------------------------------- -------
_ A06 ACTIVE
_ A07 ACTIVE
s C0 E589C396944007A6 5D40369997A386F4 ONLINE
s C1 79BF0AA3D2387960 0367DC04533125FF ACTIVE_
_ P00 41-00YE1 ONLINE
_ P01 41-00K11 ONLINE
_ P02 41-0A355 ONLINE
_ P03 41-0BA3F ONLINE
_ P04 41-0RT2T DEACTIVATED
_ P05 41-00342 DISABLED
- Make sure that these registers are EMPTY (for C0 and C1): DES
new master key register, the current signature master key register
(SMK) and the PKA key management master key register (KMMK). On a
z900, you should see this:
Figure 29. Coprocessor Hardware Status Panel
CSFCMP10 ----------- ICSF - Coprocessor Hardware Status ----------------
OPTION ===>
CRYPTO DOMAIN: 0
REGISTER STATUS COPROCESSOR C0 COPROCESSOR C1
More: +
Crypto Serial Number or : E589C396944007A6 79BF0AA3D2387960
Module Id : 5D40C39997A396F0 0367DC04533125FF
Status : ONLINE ACTIVE
DES/Symmetric-Keys Master Key
New master key register : EMPTY EMPTY
Verification pattern :
Hash pattern :
:
Old master key register : EMPTY EMPTY
Verification pattern :
Hash pattern :
:
Current master key register : VALID VALID
Verification pattern : CA6B408A02371B1D 261AAB8A02371705
Hash pattern : 41DF774FF81547D0 562A5202F8154331
: 090ABC4539727511 4093990AB1202451
PKA Signature/Asymmetric-Keys Master Key
New master key register : N/A N/A
Hash pattern :
:
Old master key register : N/A N/A
Hash pattern :
:
Current master key register : EMPTY EMPTY
Hash pattern :
:
PKA Key Management Master Key register
Hash pattern : EMPTY EMPTY
:
Special Secure Mode : Enabled Enabled
Environment Control Mask : FBFEFCF0 FBFEFCF0
Crypto Configuration Control : EF569412CD91AB78 EF569412CD91AB78
: 1F25A78BC88ED77A 1F25A78BC88ED77A
Press ENTER to refresh the hardware status display.
Press END to exit to the previous menu.
- If the registers are not EMPTY, go to Entering master key parts. Reset
the registers that are not EMPTY. Be sure to check both C0 and C1.
- If you have one or more PCICCs, there is no checking to be done.
- Rerun PPINIT.
|