<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html lang="en-us" xml:lang="en-us"> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <meta name="security" content="public" /> <meta name="Robots" content="index,follow" /> <meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' /> <meta name="DC.Type" content="concept" /> <meta name="DC.Title" content="Migrate to the Cryptographic Coprocessor" /> <meta name="abstract" content="If you have worked with cryptography before, you may have a requirement to migrate from a previous cryptography product to the 4764 or 4758 Cryptographic Coprocessor." /> <meta name="description" content="If you have worked with cryptography before, you may have a requirement to migrate from a previous cryptography product to the 4764 or 4758 Cryptographic Coprocessor." /> <meta name="DC.Relation" scheme="URI" content="rzajcco4758.htm" /> <meta name="DC.Relation" scheme="URI" content="rzajcmigrateprpq.htm" /> <meta name="copyright" content="(C) Copyright IBM Corporation 2006" /> <meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" /> <meta name="DC.Format" content="XHTML" /> <meta name="DC.Identifier" content="migrate4758" /> <meta name="DC.Language" content="en-us" /> <!-- All rights reserved. Licensed Materials Property of IBM --> <!-- US Government Users Restricted Rights --> <!-- Use, duplication or disclosure restricted by --> <!-- GSA ADP Schedule Contract with IBM Corp. --> <link rel="stylesheet" type="text/css" href="./ibmdita.css" /> <link rel="stylesheet" type="text/css" href="./ic.css" /> <title>Migrate to the Cryptographic Coprocessor</title> </head> <body id="migrate4758"><a name="migrate4758"><!-- --></a> <!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script> <h1 class="topictitle1">Migrate to the Cryptographic Coprocessor</h1> <div><p>If you have worked with cryptography before, you may have a requirement to migrate from a previous cryptography product to the 4764 or 4758 Cryptographic Coprocessor.</p> <div class="note"><span class="notetitle">Note:</span> <strong>Migrating from the 4758 to the 4764:</strong><p>If you are replacing your 4758 Cryptographic Coprocessor with the newer 4764 Cryptographic Coprocessor, then ensure that the roles and profiles for the 4764 Coprocessor are setup similar to those used with the 4758 Coprocessor. Both the 4758 and 4764 Cryptographic Coprocessors can use the same CCA APIs and key store files.</p> </div> <div class="p">You may have cryptographic cross-domain files from Cryptographic Support for OS/400<sup>®</sup> (5722-CR1). Or you may have key store files from the IBM<sup>®</sup> Common Cryptographic Architecture Services for OS/400 (5799-FRF) product. If this is the case, you can migrate their contents to your new Cryptographic Coprocessor. There is an example migration program available for each cryptographic product:<ul><li><strong>Cryptographic Support for AS/400<sup>®</sup> or i5/OS™ (5769–CR1 or 5722–CR1):</strong> Cryptographic Support is a software-only product that encrypts cross-domain keys under a host master key. Cryptographic Support then stores the cross-domain keys in a file. You can migrate cross-domain key files from Cryptographic Support for AS/400 or i5/OS to your Cryptographic Coprocessor. See <a href="rzajcmigratedomain.htm">Migrate Cryptographic Support for AS/400 cross-domain key files</a>.</li> <li><strong>IBM CCA Services (5799–FRF) PRPQ:</strong> This product provides cryptographic function on cryptographic hardware by using Data Encryption Standard (DES). The CCA Services PRPQ requires that you have a cryptographic processor, hardware feature number 2620 or 2628, installed on your server. You can migrate key store files from the IBM CCA Services to your Cryptographic Coprocessor. See <a href="rzajcmigrateprpq.htm">Migrate key store files from the IBM CCA Services for OS/400 PRPQ</a>.</li> </ul> </div> </div> <div> <ul class="ullinks"> <li class="ulchildlink"><strong><a href="rzajcmigrateprpq.htm">Migrate key store files from the IBM CCA Services for OS/400 PRPQ</a></strong><br /> If you currently use the Common Cryptographic Architecture (CCA) Services for OS/400 (5799-FRF), you can migrate the keys in the key store file so that your Cryptographic Coprocessor can use them. The Coprocessor uses the migrated keys with the CCA Cryptographic Service Provider (CCA CSP, which is packaged as i5/OS Option 35).</li> </ul> <div class="familylinks"> <div class="parentlink"><strong>Parent topic:</strong> <a href="rzajcco4758.htm" title="IBM offers two Cryptographic Coprocessors, which are available on a variety of server models.">4764 and 4758 Cryptographic Coprocessors</a></div> </div> </div> </body> </html>