OA58377: CORRECT AND ENABLE EXPLOITATION OF MSAE9 WHEN RUNNING ON Z15

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• ICSF fenced the exploitation of MSAE9 at general availability of
  Web Deliverable 19. Additionally, an issue with incorrect data
  being returned from CSFPGAV for CKA_VALUE for EC private keys
  was seen.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users of ICSF wishing to exploit ECC using hardware          *
  * instructions.                                                *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * This APAR enables ICSF's exploitation of                     *
  * Message-security-assist                                      *
  * extension 9 (MSAE9) for the following services:              *
  * * Digital Signature Generate (CSNDDSG and CSNFDSG)           *
  * * Digital Signature Verify (CSNDDSV and CSNFDSV)             *
  * * PKCS 11 Derive key (CSFPDVK and CSFPDVK6)                  *
  * * PKCS 11 Generate key pair (CSFPGKP and CSFPGKP6)           *
  * * PKCS 11 Private Key Sign (CSFPPKS and CSFPPKS6)            *
  * * PKCS 11 Public Key Verify (CSFPPKV and CSFPPKV6)           *
  *                                                              *
  * Additionally, it corrects incorrect output from PKCS 11 Get  *
  * attribute value (CSFPGAV and CSFPGAV6) for CKA_VALUE.        *
  *                                                              *
  * Hardware Keywords: D/T8561                                   *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  Problem Summary
  ------------------------------------------------------------
  ICSF fenced off exploitation of MSAE9 (new ECC functionality on
  z15) and is now enabling it.
  

Problem conclusion

• Problem Conclusion
  ------------------------------------------------------------
  ICSF's MSAE9 implementation has been enabled.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ01386

Modules/Macros

• CSFINPV2 CSFINIT2 CSFTCPA1
  

Fix information

• Fixed component name

  ICSF/MVS

• Fixed component ID

  568505101

Applicable component levels

• R7D1 PSY UJ01386

     UP19/11/15 P F911

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.