SI40203 - CCA Add support for the 4765 cryptographic coprocessor

TYPE PROGRAM  REL  NUMBER   MIN/MAX  OPTION
---- -------- ---  -------  -------  ------
PRE  5770999  710  MF99001   00/00    0000
DIST 5733CY3  710  SI37782   NONE     0000



NOTICE:
-------
Application of this PTF may disable or render ineffective programs that
use system memory addresses not generated by the IBM translator,
including programs that circumvent control technology designed to limit
interactive capacity to purchased levels.  This PTF may be a prerequisite
for future PTFs.  By applying this PTF you authorize and agree to the
foregoing.

This PTF is subject to the terms of the license agreement which
accompanied, or was contained in, the Program for which you are obtaining
the PTF.  You are not authorized to install or use the PTF except as part
of a Program for which you have a valid Proof of Entitlement.

SUBJECT TO ANY WARRANTIES WHICH CAN NOT BE EXCLUDED OR EXCEPT AS EXPLICITLY
AGREED TO IN THE APPLICABLE LICENSE AGREEMENT OR AN APPLICABLE SUPPORT
AGREEMENT, IBM MAKES NO WARRANTIES OR CONDITIONS EITHER EXPRESS OR IMPLIED,
INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OR CONDITIONS OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON INFRINGEMENT,
REGARDING THE PTF.

The applicable license agreement may have been provided to you in printed
form and/or may be viewed using the Work with Software Agreements (WRKSFWAGR)
CL command.


APAR Error Description / Circumvention

-------------------------------------------------
Add support in IBM i Option 35 for the 4765 cryptographic
coprocessor

CORRECTION FOR APAR 'SE43825' :
-------------------------------
Support is added.  The CCA 4.10 level is now supported.

CIRCUMVENTION FOR APAR 'SE43825' :
----------------------------------
None.


Activation Instructions


If you are not using or do not intend to use a cryptographic
coprocessor nothing further needs to be done.

If you are using or intend or a cryptographic coprocessor, follow these
steps:

- End all jobs that are using the CCA APIs in IBM i Option 35.
- Load and apply the PTF.
- Start the jobs again.




Special Instructions

If you do not currently have a 4764 Cryptographic Coprocessor installed
or do not have any AES keystore files created, nothing further needs to
be done.

This PTF introduces a format change to AES keystore files used with the
4764 cryptographic coprocessor.  Existing AES keystore files will be
unusable until they are converted.  Operations using the old format
keystore files will fail with either return/reason codes 12/197 or
return/reason codes 8/6009.  A migration utility program is
provided to convert your existing AES keystore files to the new format.

Before using the the migration utility program, it is recommended that
you save a backup copy of each AES keystore file.

To convert AES keystore files, use the following command:

CALL QCCA/QC6UPDAES PARM('FILENAME' 'LIBNAME')

where FILENAME is the name of an AES keystore and LIBNAME is the
name of the library in which the file is stored.

Run this command for each AES keystore file on the system.

If this PTF is removed, delete the converted AES files and restore the
backed up copies.

DES and PKA keystores are unaffected by this PTF.


Default Instructions

THIS PTF CAN BE APPLIED IMMEDIATE OR DELAYED.



Supersedes

PTF/FIX NO(S).  APAR TITLE LINE
--------------  ------------------------------------------------------------
     NONE

Summary Information

System i Support