The Crypto Express3 feature can be configured as a coprocessor
for secure key operation or as an accelerator for clear key RSA operations.
The ability to change the configuration of the Crypto Express3 feature
allows the administrator to change the Crypto Express3 to meet the
site's processing needs. If master keys have been loaded into
the registers on the Crypo Express3 feature, the master keys will
be not be zeroized when the configuration is changed.
The Crypto Express3 is configured from the support element. See Support Element Operations Guide, SC28-6820, for details.
When changing the configuration:
- The coprocessor/accelerator must be deactivated on all partitions
using that coprocessor/accelerator. From a z/OS System, you can do
this using the ICSF coprocessor management panel. This allows any
existing work queued to the coprocessor/accelerator to complete and
prevents new work from being enqueued.
- When the configuration change is complete (please allow sufficient
time for the support element to complete the change), the coprocessor/accelerator
can be activated on the ICSF coprocessor management panel. If the
support element hasn't completed the change when a coprocessor/accelerator
is activated, the status will be 'busy'.
- Coprocessors with valid master keys will become active and will
be used to process work. Coprocessors without valid master keys will
need to have a master key loaded. Accelerators will become active
and will be used to process work.