lszcrypt - Display cryptographic devices

Edit online

Use the lszcrypt command to display information about cryptographic adapters that are managed by the cryptographic device driver and its AP bus attributes.

The following information can be displayed for each cryptographic adapter:

The card type
The online status
The hardware card type
The card capability
The hardware queue depth
The request count

The following AP bus attributes can be displayed:

The AP domain
The configuration timer
The poll thread status
The poll timeout
The AP interrupt status

lszcrypt syntax

Where:

-V or --verbose, -VV, -VVV

increases the verbose level for cryptographic adapter information.

-V or --verbose: displays card type and online status.
-VV: displays card type, online status, hardware card type, hardware queue depth, and request count.
-VVV: displays card type, online status, hardware card type, hardware queue depth, request count, pending request queue count, outstanding request queue count, and installed function facilities.

<device ID>

specifies the cryptographic adapter that is displayed. A cryptographic adapter can be specified either in decimal notation or hexadecimal notation with a '0x' prefix. If no adapters are specified, information about all available adapters is displayed.

-b or --bus

displays the AP bus attributes.

-c or --capability

shows the capabilities of a cryptographic adapter of hardware type 6 or higher. The capabilities of a cryptographic adapter depend on the card type and the installed function facilities. A cryptographic adapter can provide one or more of the following capabilities:

RSA 2K Clear Key
RSA 4K Clear Key
CCA Secure Key (full function set)
CCA Secure Key (restricted function set)
EP11 Secure Key
Long RNG

The restricted function set for CCA Secure Key applies to shared adapters for z/VM® guests.

-v or --version

displays version information.

-h or --help

displays a short help text, then exits. To view the man page, enter man lszcrypt.

Examples

These examples illustrate common uses for lszcrypt.

To display information about all available cryptographic adapters:

# lszcrypt

This command displays output similar to the following example:

card00: CEX3A
card01: CEX3C
card02: CEX3A
card03: CEX3C
card04: CEX3C
card05: CEX3C
card06: CEX4A
card08: CEX4A
card09: CEX4P
card0a: CEX4P
card0b: CEX4C

To display card type and online status of all available cryptographic adapters:

# lszcrypt -V

This command displays output similar to the following example:

card00: CEX3A online
card01: CEX3C online
card02: CEX3A offline
card03: CEX3C online
card04: CEX3C online
card05: CEX3C online
card06: CEX4A offline
card08: CEX4A online
card09: CEX4P online
card0a: CEX4P online
card0b: CEX4C online

To display card type, online status, hardware card type, hardware queue depth, and request count for cryptographic adapters 00, 02, and 0a.:
```
# lszcrypt -VV 0x00 0x02 0x0b
```
This command displays output similar to the following example:
```
card00: CEX3A online  hwtype=8  depth=8 request_count=0
card02: CEX3A offline hwtype=8  depth=8 request_count=0
card0b: CEX4C online  hwtype=10 depth=8 request_count=292
```
Tip: In the adapter specification you can also use one-digit hexadecimal or decimal notation. The specifications 0x0 0x2 0xb, 0x00 0x02 0x0b and 0 2 11 are all equivalent.

To display the device ID and the installed function facility in hexadecimal notation as well as card type, online status, hardware card type, hardware queue depth, request count, pending request queue count, outstanding request queue count, and installed function facilities:

# lszcrypt -VVV 0x00 0x02 0x0b

This command displays output similar to the following example:

card00: CEX3A online  hwtype=8  depth=8 request_count=0   pendingq_count=0 requestq_count=0 functions=0x60000000
card02: CEX3A offline hwtype=8  depth=8 request_count=0   pendingq_count=0 requestq_count=0 functions=0x60000000
card0b: CEX4C online  hwtype=10 depth=8 request_count=292 pendingq_count=0 requestq_count=0 functions=0x90000000

To display AP bus information:

# lszcrypt -b

This command displays output similar to the following example:

ap_domain=8
ap_interrupts are enabled
config_time=30 (seconds)
poll_thread is disabled
poll_timeout=250000 (nanoseconds)

To display the capabilities for the cryptographic adapter with device index 0x0b:
```
# lszcrypt -c 0x0b
```
This command displays output similar to the following example:
```
Coprocessor card0b provides capability for:
CCA Secure Key
RSA 4K Clear Key
Long RNG
```