The function control vector tells the Cryptographic Coprocessor what key length to use to create keys. You cannot perform any cryptographic functions without loading a function control vector.
After you create and define role and profile, you must load a function control vector (FCV) for your Cryptographic Coprocessor. Without it, your Coprocessor will be unable to perform any cryptographic operations.
A function control vector is a digitally signed value stored in a file provided by IBM®. When you install i5/OS™ Option 35, the file is stored in the root file system with a path of /QIBM/ProdData/CAP/FCV.CRT. This value enables the cryptographic application within the Coprocessor to yield a level of cryptographic service consistent with applicable import and export regulations.
The easiest and fastest way to load the FCV is to use the Cryptographic Coprocessor configuration web-based utility found off of the Tasks page at http://server-name:2001. The utility includes the Basic configuration wizard that is used when the Coprocessor is in an un-initialized state. If the Coprocessor has already been initialized, then click on Manage configuration and then click on Attributes to load the FCV.
If you would prefer to write your own application to load the FCV, you can do so by using the Cryptographic_Facility_Control (CSUACFC) API verb.
Two other example programs are provided that show how to clear the function control vector. One of them is written in ILE C, while the other is written in ILE RPG.
After you load a function control vector for your Coprocessor, you can load and set a master key using master key to use to encrypt keys.