A fix is available
APAR status
-
Closed as program error.
Error description
-
Currently z/VSE does not distinguish between Crypto Express 7S card and Crypto Express 6s card. Messages and command output for Hardware Crypto commands show CEX6S instead of CEX7S.
Local fix
Problem summary
-
**************************************************************** * USERS AFFECTED: 1. All users of IBM Crypto Express 7S * * coprocessors. * * 2. All users who have EP11 coprocessors * * assigned to the z/VSE LPAR or z/VM guest * * 3. Users relying on CPACF for generating * * random numbers, i.e. users without a CCA * * coprocessor. * **************************************************************** * PROBLEM DESCRIPTION: 1. Currently, identification of CEX7S * * coprocessors is not supported. * * 2. The APSTAT command mistakenly tries * * to show CCA information for EP11 * * coprocessors. * * 3. When generating random number with * * CPACF, more than the requested number * * of random bytes might be written. * **************************************************************** 1. The crypto device driver did not check for CEX7S yet. 2. EP11 cards are treated as CCA coprocessors in the APSTAT command leading to invalid output. 3. Creating random numbers via CPACF could result in a storage overlay bug.
Problem conclusion
-
1. Correctly identify IBM Crypto Express 7S as such. The output of the hardware crypto commands STATUS, APHIST and APSTAT changes in order to show the presence of IBM Crypto Express 7S coprocessors. Message 1J054I has a new variant indicating that an IBM Crypto Express 7S coprocessor has been found. 2. Do not display invalid information for EP11 CEXs. Instead print this output for CCA coprocessors only. 3. Fixed bug in bounds check in routine RndCPACF in phase IJBCRLIB.
Temporary fix
Comments
APAR Information
-
APAR number
DY47834
-
Reported component name
VSE/AF SVR/BAM
-
Reported component ID
5686VS606
-
Reported release
62C
-
Status
CLOSED PER
-
PE
NoPE
-
HIPER
NoHIPER
-
Special Attention
NoSpecatt / Xsystem
-
Submitted date
2020-07-29
-
Closed date
2020-08-14
-
Last modified date
2020-09-01
-
APAR is sysrouted FROM one or more of the following:
-
APAR is sysrouted TO one or more of the following:
UD54382
Modules/Macros
-
BSTPSTS IJBCRFLE IJBCRLIB IJBCRYPT IJBHCDRV IJBHCOPR IJBKMDRV
Fix information
-
Fixed component name
VSE/AF SVR/BAM
-
Fixed component ID
5686VS606
Applicable component levels
-
R62C PSY UD54382
UP20/09/01 I 1000
Fix is available
-
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Type":"MASTER","Line of Business":{"code":"","label":""},"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG32M","label":"APARs - VSE\/ESA environment"},"ARM Category":[],"Platform":[{"code":"PF038","label":"z\/VSE"}],"Version":"All Versions"}]
Document Information
Modified date:
16 November 2021