OA59874: New Function - zDG Cryptographic Express8S Hardware Security Module Support

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• new function
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: RMF users                                    *
  ****************************************************************
  * PROBLEM DESCRIPTION: RMF support for Cryptographic           *
  *                      Express8S Hardware Security Module on   *
  *                      the IBM z16 server (E3931/K).           *
  ****************************************************************
  With this APAR, RMF's Monitor I and Monitor III Crypto
  data collection (>V2R3 only) is extended to recognize
  performance measurements from Cryptographic Express8S
  Hardware Security Module (HSM), configured as Crypto
  Express8S Coprocessor (CEX8C), Crypto Express8S
  Accelerator (CEX8A) or Crypto Express8S PKCS11
  Coprocessor (CEX8P) type on IBM z16.
  Cryptographic Express8S HSM measurements are stored in the
  existing Cryptographic Data Section of SMF record 70 subtype 2
  and Monitor III ERBCRYG3 - Cryptographic Hardware Data Table
  (>V2R3 only).
  
  +--------------------------------------------------------------+
  >>>>> SMF RECORD TYPE 70 SUBTYPE 2 - CRYPTO ACTIVITY <<<<<
  
  Field R7023CT of the Cryptographic Coprocessor Data Section
  contains the crypto processor type, which can be
   3 = PCICC, 5 = PCIXCC, 7 = CEX2C, 9 = CEX3C, 10 = CEX4C ,
  11 = CEX5C, 12 = CEX6C, 13 = CEX7C, 14 = CEX8C
  
  Field R7024CT of the Cryptographic Accelerator Data Section
  contains the crypto processor type, which can be
   4 = PCICA, 6 = CEX2A, 8 = CEX3A, 10 = CEX4A , 11 = CEX5A ,
  12 = CEX6A, 13 = CEX7A, 14 = CEX8A
  
  Field R7025CT of the Cryptographic PKCS11 Coprocessor Data
  Section contains the crypto processor type, which can be
  10 = CEX4P , 11 = CEX5P , 12 = CEX6P, 13 = CEX7P, 14 = CEX8P
  
  +--------------------------------------------------------------+
  >> MONITOR III ERBCRYG3 - CRYPTOGRAPHIC HARDWARE DATA
  TABLE (>V2R3 only) <<
  Field APType of the CRYMD Table Entry Section contains the
  Crypto processor type, which can be:
  11 = CEX5S, 12 = CEX6S, 13 = CEX7S, 14 = CEX8S
  Field MapTypeof the CRYMD Table Entry Section contains the
  mapping type, which can be:
  8 = Accelerator mode, 9 = coprocessor mode (CCA), 10 = XCP mode
  (PKCS11)
  

Problem conclusion

Temporary fix

Comments

• KEYWORD: SMFREC/K
           E3931/K
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ08454 UJ08455 UJ08456

Modules/Macros

• ERBCRYG3 ERBMFDCY ERBSMF70 GRBMFDCY
  

Fix information

• Fixed component name

  RMF DATA GATHER

• Fixed component ID

  566527401

Applicable component levels

• R7B0 PSY UJ08456

     UP22/05/26 P F205  

• R7C0 PSY UJ08455

     UP22/05/26 P F205  

• R7D0 PSY UJ08454

     UP22/05/26 P F205  

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.