Steps for adding cryptographic coprocessors after initialization

You may need to initialize coprocessors after system initialization.

Note: Use this procedure if you did not run the Pass Phrase Initialization utility. If you used the utility, see Steps for adding a CCA coprocessor after first time Pass Phrase Initialization.

Follow this procedure.

Select option 1, COPROCESSOR MGMT, on the Primary Menu panel.

The Coprocessor Management panel, as shown in Figure 1, appears.

Figure 1. Selecting a coprocessor on the Coprocessor Management Panel

 CSFGCMPOO ---------------- ICSF Coprocessor Management -------- Row 1 to 5 of 5
COMMAND ===> 

Select the cryptographic features to be processed and press ENTER.
Action characters are: A, D, E, K, R, and S. See the help panel for details.

  CRYPTO  SERIAL
  FEATURE NUMBER   STATUS               AES DES ECC RSA P11
  ------- -------- -------------------- --- --- --- --- ---
.   4C00  16BA6173 Active                I   A   A   A
.   4C01  16BA6174 Active                I   A   A   A
.   4C02  16BA6175 Active                I   A   A   A
.   4A03  N/A      Active
.   4A04  16BA6200 Master key incorrect  I   U   U   U
******************************* Bottom of data ******************************** 

COMMAND ===>                                        SCROLL ===> PAGE

Select the Coprocessor to be processed by entering 'E' next to the Coprocessor.

The Master Key Entry panel appears. See Figure 2.

Figure 2. The Master Key Entry Panel to Reset Registers

CSFDKE50------------- ICSF - Master Key Entry -----------------
COMMAND ===> 

              AES new master key register                : EMPTY
              DES new master key register                : EMPTY
              ECC new master key register                : EMPTY
              RSA new master key register                : EMPTY 
             
  Specify information below
    Key Type  ===> ___              (AES-MK, DES-MK, ECC-MK, RSA-MK)

    Part      ===> ______           (RESET, FIRST, MIDDLE, FINAL)

    Checksum  ===> 00

    Key Value ===> 0000000000000000
              ===> 0000000000000000
              ===> 0000000000000000  (AES-MK, ECC-MK and RSA-MK only)
              ===> 0000000000000000  (AES-MK, ECC-MK only)



  Press ENTER to process.
  Press END   to exit to the previous menu.

Ensure that the new master key registers are EMPTY. If they are not, you will need to RESET to clear the contents of the registers to set a new key value.

You must now load the master keys into your system.
If you are going to reload your current master keys, you need to know the current master key value and checksum. If you want the coprocessor to become ACTIVE after initialization, you MUST enter the same master key values.

Follow the instructions on Steps for entering the first master key part.
When all key parts have been loaded, SET the master key. From the Primary Menu panel choose option 2 - Master Key Management. From the Master Key Management panel, choose option 4 - SET MK.