IBM Support

DY47834: CRYPTO EXPRESS 7S CARD IS SHOWN AS CRYPTO EXPRESS 6S OR CEX6S IN COMMAND OUTPUT FOR HARDWARE CRYPTO COMMANDS AND MESSAGES

A fix is available

Obtain the fix for this APAR.

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • Currently z/VSE does not distinguish between Crypto Express 7S
card and Crypto Express 6s card. Messages and command output for
Hardware Crypto commands show CEX6S instead of CEX7S.

Local fix

  •

Problem summary

  • ****************************************************************
* USERS AFFECTED: 1. All users of IBM Crypto Express 7S        *
*                 coprocessors.                                *
*                 2. All users who have EP11 coprocessors      *
*                 assigned to the z/VSE LPAR or z/VM guest     *
*                 3. Users relying on CPACF for generating     *
*                 random numbers, i.e. users without a CCA     *
*                 coprocessor.                                 *
****************************************************************
* PROBLEM DESCRIPTION: 1. Currently, identification of CEX7S   *
*                      coprocessors is not supported.          *
*                      2. The APSTAT command mistakenly tries  *
*                      to show CCA information for EP11        *
*                      coprocessors.                           *
*                      3. When generating random number with   *
*                      CPACF, more than the requested number   *
*                      of random bytes might be written.       *
****************************************************************
1. The crypto device driver did not check for CEX7S yet.
2. EP11 cards are treated as CCA coprocessors in the APSTAT
command leading to invalid output.
3. Creating random numbers via CPACF could result in a storage
overlay bug.

Problem conclusion

  • 1. Correctly identify IBM Crypto Express 7S as such.
The output of the hardware crypto commands STATUS, APHIST and
APSTAT changes in order to show the presence of IBM Crypto
Express 7S coprocessors.
Message 1J054I has a new variant indicating that an IBM Crypto
Express 7S coprocessor has been found.
2. Do not display invalid information for EP11 CEXs. Instead
print this output for CCA coprocessors only.
3. Fixed bug in bounds check in routine RndCPACF in phase
IJBCRLIB.

Temporary fix

  •

Comments

  •

APAR Information

  • APAR number

    DY47834

  • Reported component name

    VSE/AF SVR/BAM

  • Reported component ID

    5686VS606

  • Reported release

    62C

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2020-07-29

  • Closed date

    2020-08-14

  • Last modified date

    2020-09-01

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UD54382

Modules/Macros

  • BSTPSTS  IJBCRFLE IJBCRLIB IJBCRYPT IJBHCDRV IJBHCOPR IJBKMDRV

Fix information

  • Fixed component name

    VSE/AF SVR/BAM

  • Fixed component ID

    5686VS606

Applicable component levels

  • R62C PSY UD54382

       UP20/09/01 I 1000

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Type":"MASTER","Line of Business":{"code":"","label":""},"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG32M","label":"APARs - VSE\/ESA environment"},"ARM Category":[],"Platform":[{"code":"PF038","label":"z\/VSE"}],"Version":"All Versions"}]

Document Information

Modified date:
16 November 2021

Page Feedback