Coprocessor Load Utility syntax

Edit online

The syntax that is used to start the Coprocessor Load Utility (CLU), and the functions of the utility are described.

CLU must be used for the following functions:
  • Ensure that the coprocessors are not busy by ending any application that has used a coprocessor. For example, end all applications that use the CCA API.
  • Obtain the release level and the status of software that is installed in the coprocessor memory segments.
  • Confirm the validity of digitally signed messages that are returned by the coprocessor.
  • Load and reload portions of the coprocessor software.
  • Reset the coprocessor.
To start the utility, follow these steps:
  1. Log on as required by your operating system.
  2. At the command line, change directory to the directory that contains the CLU files. The default directory is /usr/lpp/csufx.4767/clu.
  3. Enter the csufclu utility name followed by the applicable parameters.
If you do not supply the necessary parameters, the utility prompts when the information is required. Optional parameters are enclosed in brackets. The syntax for the parameters that follow the utility name is
-c cmd [-l log_file] [-a coprocessor_number] [-d datafile] [-v]
Where:
log_file
Identifies the log file name. The utility appends entries to this ASCII text file as it performs the operations that are requested.
cmd
Specifies a two-letter abbreviation that represents the loader command to be run.
coprocessor_number
Provides the coprocessor number as established by the device driver. This parameter defaults to 0. Coprocessors are designated to the device driver as 0, 1, and 2. You can use the serial number information that you obtain with the ST or VA commands and the serial number that is printed on the end-bracket of the coprocessor to correlate a particular coprocessor to the coprocessor_number. The utility supports up to eight coprocessors per system.
data_file
Identifies the data file (drive, directory, and file name) that is used for the requested operation. To identify the data_file name, use one of the following methods:
  • For software loads and reloads, the data_file name is the file name of the software image that you are loading into the coprocessor. The Support Program README file provides the data_file name.
  • For the coprocessor, the coprocessor status is obtained with the VA command. The data_file name is the class-key certificate file name that used to validate the coprocessor response. The FAQ section of the product website (http://www.ibm.com/security/cryptocards/pciecc2/overview.shtml) contains a description of the procedure for validating the coprocessor and its code. This description also contains a list of the current class-key certificate file names. You can download the required certificate file from the website.
-v
Displays verbose output. Enables extended output on some commands.

From the CLU directory, enter the csufclu -h command at a command prompt to display the help menu for the CLU. The CLU help menu contains a complete description of the CLU options.

To obtain the coprocessor status and save the results to the log file, enter the following:
csufclu -c ST -l nnnnnnnn.log

It is suggested that you make nnnnnnnn the serial number of the coprocessor. It is not mandatory to use the serial number, but it is used to retain a history of all software changes made to each specific coprocessor.