content_image/997871.jpg content_image/997870.jpg
When you add or change the control or usage domain index and cryptographic coprocessor number dynamically for a running system, a confirmation message is displayed. After processing, a status window opens that indicates the result of a dynamic addition or change of a cryptographic definition to an LPAR (see Figure 10-7). 

<img src='content_image/997871.jpg'>

## Dynamic removal of the cryptographic definition 

You can remove the cryptographic definition from a logical partition dynamically by using the Change LPAR Cryptographic Controls task. This section addresses the related issues and describes the procedure. 

Complete the following steps: 

1. Before you change the cryptographic settings by using the Change LPAR Cryptographic Controls task, verify that the cryptographic lists you want to remove from a logical partition are offline (Standby). For more information about setting the cryptographic channel status, see “Configuring a Crypto Express6S online or offline on a logical partition” on page 235. If you try to remove the lists dynamically while they are online, the change fails and you receive the message that is shown in Figure 10-8. 

<img src='content_image/997870.jpg'>

In addition to adding or changing cryptographic settings for a logical partition, you can remove the Control and Usage domains or Cryptographic Candidate lists for a logical partition from the Change LPAR Cryptographic Controls window (see Figure 10-6 on page 226). 

After clearing the definitions for a logical partition, remove a definition dynamically by clicking Change Running System . To save the new configuration to the Image Profile without changing the running system, select Save to Profiles . With Save and Change , the removal becomes concurrently active, and the removed cryptographic coprocessor also cannot be used for the next image activation. 

