88 lines
6.6 KiB
HTML
88 lines
6.6 KiB
HTML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<!DOCTYPE html
|
|
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html lang="en-us" xml:lang="en-us">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
|
|
<meta name="security" content="public" />
|
|
<meta name="Robots" content="index,follow" />
|
|
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
|
|
<meta name="DC.Type" content="concept" />
|
|
<meta name="DC.Title" content="Load a function control vector" />
|
|
<meta name="abstract" content="The function control vector tells the Cryptographic Coprocessor what key length to use to create keys. You cannot perform any cryptographic functions without loading a function control vector." />
|
|
<meta name="description" content="The function control vector tells the Cryptographic Coprocessor what key length to use to create keys. You cannot perform any cryptographic functions without loading a function control vector." />
|
|
<meta name="DC.Relation" scheme="URI" content="rzajcsetup.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzajcloadfcvc.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzajcloadfcvrpg.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzajcclearfcvc.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzajcclearfcvrpg.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzajcrolesprofiles.htm" />
|
|
<meta name="DC.Relation" scheme="URI" content="rzajcmasterkey.htm" />
|
|
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
|
|
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
|
|
<meta name="DC.Format" content="XHTML" />
|
|
<meta name="DC.Identifier" content="controlvector" />
|
|
<meta name="DC.Language" content="en-us" />
|
|
<!-- All rights reserved. Licensed Materials Property of IBM -->
|
|
<!-- US Government Users Restricted Rights -->
|
|
<!-- Use, duplication or disclosure restricted by -->
|
|
<!-- GSA ADP Schedule Contract with IBM Corp. -->
|
|
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
|
|
<link rel="stylesheet" type="text/css" href="./ic.css" />
|
|
<title>Load a function control vector</title>
|
|
</head>
|
|
<body id="controlvector"><a name="controlvector"><!-- --></a>
|
|
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
|
|
<h1 class="topictitle1">Load a function control vector</h1>
|
|
<div><p>The function control vector tells the Cryptographic Coprocessor
|
|
what key length to use to create keys. You cannot perform any cryptographic
|
|
functions without loading a function control vector.</p>
|
|
<p>After you create and define role and profile, you must load a function
|
|
control vector (FCV) for your Cryptographic Coprocessor. Without it, your
|
|
Coprocessor will be unable to perform any cryptographic operations. </p>
|
|
<p>A function control vector is a digitally signed value stored in a file
|
|
provided by IBM<sup>®</sup>.
|
|
When you install i5/OS™ Option
|
|
35, the file is stored in the root file system with a path of <samp class="codeph">/QIBM/ProdData/CAP/FCV.CRT</samp>.
|
|
This value enables the cryptographic application within the Coprocessor to
|
|
yield a level of cryptographic service consistent with applicable import and
|
|
export regulations.</p>
|
|
<p>The easiest and fastest way to load the FCV is to use the Cryptographic
|
|
Coprocessor configuration web-based utility found off of the Tasks page at
|
|
http://<var class="varname">server-name</var>:2001. The utility includes the Basic
|
|
configuration wizard that is used when the Coprocessor is in an un-initialized
|
|
state. If the Coprocessor has already been initialized, then click on <span class="uicontrol">Manage
|
|
configuration</span> and then click on <span class="uicontrol">Attributes</span> to
|
|
load the FCV.</p>
|
|
<p>If you would prefer to write your own application to load the FCV, you
|
|
can do so by using the Cryptographic_Facility_Control (CSUACFC) API verb.</p>
|
|
<p>Two other example programs are provided that show how to clear the function
|
|
control vector. One of them is written in ILE C, while the other is written
|
|
in ILE RPG. </p>
|
|
<p>After you load a function control vector for your Coprocessor, you can
|
|
load and set a master key using master key to use to encrypt keys. </p>
|
|
<div class="note"><span class="notetitle">Note:</span> Read the <a href="codedisclaimer.htm#codedisclaimer">Code license and disclaimer information</a> for
|
|
important legal information.</div>
|
|
</div>
|
|
<div>
|
|
<ul class="ullinks">
|
|
<li class="ulchildlink"><strong><a href="rzajcloadfcvc.htm">Example: ILE C program for loading a function control vector for your Cryptographic Coprocessor</a></strong><br />
|
|
Change this program example to suit your needs for loading a function control vector for your Cryptographic Coprocessor.</li>
|
|
<li class="ulchildlink"><strong><a href="rzajcloadfcvrpg.htm">Example: ILE RPG program for loading a function control vector for your Coprocessor</a></strong><br />
|
|
Change this program example to suit your needs for loading a function control vector for your Coprocessor.</li>
|
|
<li class="ulchildlink"><strong><a href="rzajcclearfcvc.htm">Example: ILE C program for clearing a function control vector from your Coprocessor</a></strong><br />
|
|
Change this program example to suit your needs for clearing a function control vector from your Coprocessor.</li>
|
|
<li class="ulchildlink"><strong><a href="rzajcclearfcvrpg.htm">Example: ILE RPG program for clearing a function control vector from your Coprocessor</a></strong><br />
|
|
Change this program example to suit your needs for clearing a function control vector from your Coprocessor.</li>
|
|
</ul>
|
|
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzajcsetup.htm" title="Configuring your Cryptographic Coprocessor allows you to begin to use all of its cryptographic operations.">Configure the Cryptographic Coprocessor</a></div>
|
|
</div>
|
|
<div class="relconcepts"><strong>Related concepts</strong><br />
|
|
<div><a href="rzajcrolesprofiles.htm" title="Cryptographic Coprocessors use role-based access control. In a role-based system, you define a set of roles, which correspond to the classes of Coprocessor users. You can enroll each user by defining an associated user profile to map the user to one of the available roles.">Create and define roles and profiles</a></div>
|
|
<div><a href="rzajcmasterkey.htm" title="After you load a function control vector, load and set the master key. You can use your master key to encrypt other keys.">Load and set a master key</a></div>
|
|
</div>
|
|
</div>
|
|
</body>
|
|
</html> |