TKE enablement

A support element is a dedicated workstation used for monitoring and operating Z hardware. TKE commands must be permitted on the Support Element before any commands issued by the TKE workstation can be executed.

For CCA crypto modules the default setting for TKE Commands is Denied. The setting must be changed to Permitted before the TKE workstation can be used to manage the crypto module.

For EP11 crypto modules, only a TKE workstation can perform certain management functions, so the setting is always shown as Permitted on the Support Element.

If TKE commands are not permitted on the Support Element, the following Details Error is displayed on the TKE Workstation when an attempt is made to open the Host ID:

Error Message: Program CSFPCIX Interface
Error Type 2
Return Code 12
Reason Code 2073

Detail Message "The Crypto Coprocessor has been disabled on the Support Element.  
It must be enabled on the Support Element before TKE can access it."

An authorized user can permit TKE commands on the Support Element, using the Support Element Console Application. For more information, see the help files that are provided with the Support Element.

Note: A global zeroize issued from the Support Element returns the state of TKE Commands to the default value of Denied for CCA host crypto modules.