QUERY VIRTUAL CRYPTO

Read syntax diagramSkip visual syntax diagram Query Virtual1 CRYPto
Notes:
  • 1 This operand is required for privilege class G users who also have privilege class A, B, C, or E.

Authorization

Privilege Class: G

Purpose

Use QUERY VIRTUAL CRYPTO to display the status of the virtual crypto resources.

Responses

Response 1:

The following response is displayed when one or more crypto resources are attached to this virtual machine.
AP apnum CEXtm  Domain domnum {shared|dedicated} config_state
apnum
is a three-digit virtual crypto adapter number (in decimal). If the resource is shared, then 001 is assigned to the virtual adapter number. If the resource is dedicated, then the actual hardware adapter number of the resource is assigned.
CEXtm
is the virtual crypto adapter, where t indicates the adapter type and m indicates the adapter mode. For dedicated resources, the value indicates the physical resource. For shared resources, the value indicates the lowest type of crypto express adapter that is available in the shared pools of all systems in the user's relocation domain. Shared crypto modes are accelerator mode or CCA coprocessor mode.

For more information, see Crypto Planning and Management.

The CEXtm value can be one of the following:
CEX3C
Crypto Express3 configured in CCA coprocessor mode
CEX3A
Crypto Express3 configured in accelerator mode
CEX4C
Crypto Express4 configured in CCA coprocessor mode
CEX4A
Crypto Express4 configured in accelerator mode
CEX4P
Crypto Express4 configured in EP11 coprocessor mode
CEX5C
Crypto Express5 configured in CCA coprocessor mode
CEX5A
Crypto Express5 configured in accelerator mode
CEX5P
Crypto Express5 configured in EP11 coprocessor mode
CEX6C
Crypto Express6 configured in CCA coprocessor mode
CEX6A
Crypto Express6 configured in accelerator mode
CEX6P
Crypto Express6 configured in EP11 coprocessor mode
CEX7C
Crypto Express7 configured in CCA coprocessor mode
CEX7A
Crypto Express7 configured in accelerator mode
CEX7P
Crypto Express7 configured in EP11 coprocessor mode
CEX8C
Crypto Express8 configured in CCA coprocessor mode
CEX8A
Crypto Express8 configured in accelerator mode
CEX8P
Crypto Express8 configured in EP11 coprocessor mode
NONE
There are no crypto resources attached to the shared pool.
UNKN
z/VM® is unable to determine the type of crypto adapter.
domnum
is a three-digit virtual domain number (in decimal). If the resource is shared, then 001 is assigned to the virtual domain number. If the resource is dedicated, then the actual hardware adapter number of the resource is assigned.
config_state
is CP's logical view of the resource state, as controlled by VARY CRYPTO.
For an APVIRT virtual machine, the configuration state is reported for the pool of shared resources. The shared pool could have one of the following configuration states:
  • online - At least one shared crypto resource is online and operational.
  • offline - All shared crypto resources are offline.
  • unavailable - No crypto resources are attached to SYSTEM.
  • error - All online shared resources are in error recovery.
For an APDED virtual machine, the configuration state is reported for each crypto resource dedicated to the virtual machine. A dedicated crypto resource could have one of the following configuration states:
  • online - Dedicated crypto resource is online.
  • offline - Dedicated crypto resource is offline and not available for use.
Note:
  1. An adapter must be configured in CCA coprocessor mode or accelerator mode in order to be attached to the system for shared use.
  2. An adapter that is configured in CCA coprocessor mode, accelerator mode or EP11 coprocessor can be attached to a virtual machine for dedicated use.
  3. For information on planning and managing crypto resources on a z/VM system, see Crypto Planning and Management in z/VM: CP Planning and Administration.

Response 2:

The following response is displayed when no crypto resources are available to the guest virtual machine.
No AP crypto domains are available

Messages

  • HCP003E Invalid option - command contains extra option(s) starting with option
  • HCP026E Operand missing or invalid