ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzajc_5.4.0.1/rzajcmigrate4758.htm

79 lines
5.0 KiB
HTML
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="concept" />
<meta name="DC.Title" content="Migrate to the Cryptographic Coprocessor" />
<meta name="abstract" content="If you have worked with cryptography before, you may have a requirement to migrate from a previous cryptography product to the 4764 or 4758 Cryptographic Coprocessor." />
<meta name="description" content="If you have worked with cryptography before, you may have a requirement to migrate from a previous cryptography product to the 4764 or 4758 Cryptographic Coprocessor." />
<meta name="DC.Relation" scheme="URI" content="rzajcco4758.htm" />
<meta name="DC.Relation" scheme="URI" content="rzajcmigrateprpq.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="migrate4758" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Migrate to the Cryptographic Coprocessor</title>
</head>
<body id="migrate4758"><a name="migrate4758"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Migrate to the Cryptographic Coprocessor</h1>
<div><p>If you have worked with cryptography before, you may have a requirement
to migrate from a previous cryptography product to the 4764 or 4758 Cryptographic
Coprocessor.</p>
<div class="note"><span class="notetitle">Note:</span> <strong>Migrating from the 4758 to the 4764:</strong><p>If you are replacing
your 4758 Cryptographic Coprocessor with the newer 4764 Cryptographic Coprocessor,
then ensure that the roles and profiles for the 4764 Coprocessor are setup
similar to those used with the 4758 Coprocessor. Both the 4758 and 4764 Cryptographic
Coprocessors can use the same CCA APIs and key store files.</p>
</div>
<div class="p">You may have cryptographic cross-domain files from Cryptographic Support
for OS/400<sup>®</sup> (5722-CR1).
Or you may have key store files from the IBM<sup>®</sup> Common Cryptographic Architecture Services
for OS/400 (5799-FRF)
product. If this is the case, you can migrate their contents to your new Cryptographic
Coprocessor. There is an example migration program available for each cryptographic
product:<ul><li><strong>Cryptographic Support for AS/400<sup>®</sup> or i5/OS™ (5769CR1 or 5722CR1):</strong> Cryptographic
Support is a software-only product that encrypts cross-domain keys under a
host master key. Cryptographic Support then stores the cross-domain keys in
a file. You can migrate cross-domain key files from Cryptographic Support
for AS/400 or i5/OS to
your Cryptographic Coprocessor. See <a href="rzajcmigratedomain.htm">Migrate Cryptographic Support for AS/400 cross-domain key files</a>.</li>
<li><strong>IBM CCA
Services (5799FRF) PRPQ:</strong> This product provides cryptographic function
on cryptographic hardware by using Data Encryption Standard (DES). The CCA
Services PRPQ requires that you have a cryptographic processor, hardware feature
number 2620 or 2628, installed on your server. You can migrate key store files
from the IBM CCA
Services to your Cryptographic Coprocessor. See <a href="rzajcmigrateprpq.htm">Migrate key store files from the IBM CCA Services for OS/400 PRPQ</a>.</li>
</ul>
</div>
</div>
<div>
<ul class="ullinks">
<li class="ulchildlink"><strong><a href="rzajcmigrateprpq.htm">Migrate key store files from the IBM CCA Services for OS/400 PRPQ</a></strong><br />
If you currently use the Common Cryptographic Architecture (CCA)
Services for OS/400 (5799-FRF),
you can migrate the keys in the key store file so that your Cryptographic
Coprocessor can use them. The Coprocessor uses the migrated keys with the
CCA Cryptographic Service Provider (CCA CSP, which is packaged as i5/OS Option
35).</li>
</ul>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzajcco4758.htm" title="IBM offers two Cryptographic Coprocessors, which are available on a variety of server models.">4764 and 4758 Cryptographic Coprocessors</a></div>
</div>
</div>
</body>
</html>