content_image/969155.jpg
GLYPH<SM590000> Cryptographic Online list 

Identifies the cryptographic coprocessor numbers that are automatically brought online during logical partition activation. The numbers that are selected in the online list must also be part of the candidate list. 

After they are activated, the active partition cryptographic definitions can be viewed from the HMC. Select the CPC, and click View LPAR Cryptographic Controls  in the CPC Operational Customization window. The resulting window displays the definition of Usage and Control domain indexes, and PCI Cryptographic candidate and online lists, as shown in Figure 6-8. Information is provided for active logical partitions only. 

<img src='content_image/969155.jpg'>

Operational changes can be made by using the Change LPAR Cryptographic Controls task, which reflects the cryptographic definitions in the image profile for the partition. With this function, the cryptographic feature can be added and removed dynamically, without stopping a running operating system. 

## 6.6 Trusted Key Entry workstation 

For more information about the management of Crypto Express7S, see IBM z15 Configuration Setup, SG24-8860. 

The TKE workstation is an optional feature that offers key management functions. It can be a TKE tower workstation (FC 0088) or TKE rack-mounted workstation (FC 0087) for z15 systems to manage Crypto Express7S, Crypto Express6S, or Crypto Express5S. 

