Verifying the IBM 4758 Model 2 Cryptographic Coprocessor for use with the Public Key Cryptography Standards #11 subsystem

The PKCS #11 subsystem is designed to automatically detect adapters capable of supporting PKCS #11 calls during installation and at reboot. For this reason, any IBM® 4758 Model 2 Cryptographic Coprocessor that is not properly configured will not be accessible from the PKCS #11 interface and calls sent to the adapter will fail.

To verify that your adapter is set up correctly, complete the following:

  1. Ensure that the software for the adapter is properly installed by typing the following command:
    lsdev -Cc adapter | grep crypt
    If the IBM 4758 Model 2 Cryptographic Coprocessor is not included in the resulting list, check that the card is seated properly and that the supporting software is correctly installed.
  2. Determine that the proper firmware has been loaded onto the card by typing the following:
    csufclu /tmp/l ST device_number_minor 
    Verify that the Segment 3 Image has the PKCS #11 application loaded. If it is not loaded refer to the adapter specific documentation to obtain the latest microcode and installation instructions.
    Note: If this utility is not available, then the supporting software has not been installed.