chzcrypt - Modify the zcrypt configuration

LPAR mode z/VM guest KVM guest

Use the chzcrypt command to configure cryptographic adapters that are managed by zcrypt and modify zcrypt's AP bus attributes.

chzcrypt syntax

Where:

-e or --enable: sets the given cryptographic devices and AP queues online.
-d or --disable: sets the given cryptographic devices and AP queues offline.
-a or --all: sets all available cryptographic adapters online or offline.
<device ID>: specifies a cryptographic adapter that is to be set online or offline. A cryptographic adapter can be specified either in decimal notation or hexadecimal notation with a '0x' prefix.
-p or --poll-thread-enable: enables zcrypt's poll thread.
-n or --poll-thread-disable: disables zcrypt's poll thread.
-c <timeout> or --config-time <timeout>: sets configuration timer for rescanning the AP bus to <timeout> seconds.
-t <time>or --poll-timeout=<time>: sets the high-resolution polling timer to <time> nanoseconds. To display the value, use lszcrypt -b.
-q <domain> or --default-domain <domain>: changes the default domain. Specify the domain as either a hexadecimal or decimal value.
Important: Be sure to enter an existing domain. The Trusted Key Entry (TKE) workstation does not find the cryptographic adapters if a non-existing domain is entered here. All CCA applications use the default domain, and do not work correctly if the specified domain does not exist.
-V or --verbose: displays verbose messages.
-h or --help: displays help information for the command. To view the man page, enter man chzcrypt.
-v or --version: displays version information.

These examples illustrate common uses for chzcrypt.

To set the cryptographic devices with the adapter IDs 0, 1, 4, 5, and 12 and their associated AP queues online (in decimal notation):
```
chzcrypt -e 0 1 4 5 12
```
Or, in hexadecimal notation:
```
chzcrypt -e 0x00 0x01 0x04 0x05 0x0C
```
To set all available cryptographic adapters, including all AP queues, offline:
```
chzcrypt -d -a
```
To set the AP queue defined by adapter ID 00 and domain 77 (0x4d) offline:
```
chzcrypt -d 00.004d
```
To set the configuration timer for rescanning the AP bus to 60 seconds and disable zcrypt's poll thread:
```
chzcrypt -c 60 
chzcrypt -n
```
To change the default domain to 77 (0x4d):
```
chzcrypt -q 0x4d
```
or
```
chzcrypt -q 77
```