Re: Running ICSF with NO Crypto Features?



Seeking comments on the (non-)advisability and implications of running
Integrated Cryptographic Services Facility (ICSF) on a z9 that has NONE
of the "crypto assist" features enabled or installed (don't ask; not
even the "free" one(s)).

I didn't know that the crypto engines on the Z9 could be disabled. I
thought you got them whether you wanted them or not.

In any case, without buying a CEX2C board, ICSF won't initialize
because you can't encrypt the CKDS and PKDS datasets without buying
that board. So you can't use ICSF without buying the CEX2C board.

As far as doing crypto calls in software, you can do that - it just
uses CP cycles. If you have a large amount of free CPU then it should
work fine.




.



Relevant Pages

  • Re: ICSF on z890?
    ... Subject: ICSF on z890? ... Application Migration & Crypto Hardware on z990 ... zSeries Crypto Hardware and Applications ...
    (bit.listserv.ibm-main)
  • Re: z9 Crypto Express2 usage
    ... the crypto coprocessors may not show as 'online' ... While setting up ICSF may be trivial, ... I reviewed the archives and found a pointer to Red Book SG24-7123 z9-109 ... I also am reviewing several ICSF manuals. ...
    (bit.listserv.ibm-main)
  • Re: ICSF First-time Startup
    ... it looks like your LPAR does not have any ... crypto hardware as part of its configuration or there is no domain assigned to ... Subject: ICSF First-time Startup ... $HASP100 CSF ON STCINRDR ...
    (bit.listserv.ibm-main)
  • Re: ICSF First-time Startup
    ... I should have mentioned in my last post that you need to define the CRYPTO ... environment for the LPAR in the HMC CRYPTO window to define the DOMAIN ... all the steps necessary to get ICSF up and running. ... $HASP100 CSF ON STCINRDR ...
    (bit.listserv.ibm-main)