Ensure the expected P11 master key support is available

ICSF introduced support for the Enterprise PKCS #11 (EP11) coprocessor and its associated P11 master key with FMID HCR77A0. ICSF uses the master key validation pattern (MKVP) in the header record of the TKDS to determine which EP11 coprocessors to make active. In FMID HCR77A0, an EP11 coprocessor was considered "active" if the MKVP in the current master key register matched the MKVP in the header record of the TKDS. If the MKVP did not match, or if the TKDS was never initialized, the EP11 coprocessor was considered "online", usable only for a limited number of non-secure key PKCS #11 services.

Staring with FMID HCR77A1, the online status no longer exists. Coprocessors are either active or in some error state. If the TKDS has been initialized, then any EP11 coprocessor that does not have a current master key register MKVP that matches the TKDS is not made active and, thus, not usable. Note, however, if the the TKDS has not been initialized, then all EP11 coprocessors will be made active even though they would only be usable for non-secure key PKCS #11 services.