Re: VIOS & Cryptographic coprocessor card

We use HMC, VIOS and the Crypto cards.
The Crypto cards are not virtualized though VIOS.
Any partitions needing the cyrpto cards own the card outright.
(Example, if you have two partitions needing access to the crypto card
then you would need two cards)

Jim

Jim W Grant
Senior VP, Chief Information Officer
Web: www.pdpgroupinc.com
Email: JWGrant@xxxxxxxxxxxxxxx
Office: (410)584-0339
Fax: (410)584-0336
Cell: (443) 271-3390




From: Keith McCully <keithmccully@xxxxxxxxx>
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>
Date: 06/27/2017 11:32 AM
Subject: VIOS & Cryptographic coprocessor card
Sent by: "MIDRANGE-L" <midrange-l-bounces@xxxxxxxxxxxx>



Hi,

Along with our up and coming V7R3 upgrade we will be installing a 4765
cryptographic co-processor card to ensure integrity and origin of
payment files via digital signatures.

Also we want to virtualize (VIOS) but the IBM Knowledge Centre says
the following for the Integrated Virtualization Manager:

"Cryptographic coprocessors are not supported in this environment. You
also cannot use a Cryptographic coprocessor to generate and store
private keys associated with digital certificates. None of the Common
Cryptographic Architecture APIs in Option 35 - CCA Cryptographic
Service Provider are supported, because these APIs route requests to
cryptographic hardware.

Applications that use IBM i Cryptographic Services APIs must use a
software cryptographic service provider because hardware cryptographic
service providers are not supported"


However, another section of the Knowledge Centre states that Virtual
I/O Servers can be created and managed via HMC as well as Integrated
Virtualization Manager:

Has anyone done this via HMC and, if so, is the functionality reduced
when compared to IVM?

Thanks

Keith