content_image/996924.jpg
<img src='content_image/996924.jpg'>

The cryptographic resource definitions include the following meanings: 

GLYPH<SM590000> Control Domain 

Identifies the cryptographic coprocessor domains that can be administered from this logical partition if it is being set-up as the TCP/IP host for the TKE. 

If you are setting up the host TCP/IP in this logical partition to communicate with the TKE, the partition is used as a path to other domains’ Master Keys. Indicate all the control domains that you want to access (including this partition’s own control domain) from this partition. 

GLYPH<SM590000> Control and Usage Domain 

Identifies the cryptographic coprocessor domains that are assigned to the partition for all cryptographic coprocessors that are configured on the partition. The usage domains cannot be removed if they are online. 

The numbers that are selected must match the domain numbers that are entered in the Options data set when you start this partition instance of ICSF. 

The same usage domain index can be used by multiple partitions regardless to which CSS they are defined. However, the combination of PCIe adapter number and usage domain index number must be unique across all active partitions. 

GLYPH<SM590000> Cryptographic Candidate list 

Identifies the cryptographic coprocessor numbers that are eligible to be accessed by this logical partition. From the list, select the coprocessor numbers (in the range 0 - 15) that identify the PCIe adapters to be accessed by this partition. 

No error condition is reported when a cryptographic coprocessor number, which is selected in the partition candidate list, is available to the partition when the partition is activated because it is configured off or not installed. The cryptographic coprocessor number is ignored and the activation process continues. 

