Cryptographic Services attributes

The Cryptographic Hardware Overview attributes provides information about cryptographic services.

AES Check Value Key Check Value of AES master key or zero if not supplied.

AES Status AES Availability for Clear keys. Valid values are:
  • Unknown=-1
  • No=0
  • Yes=1

ASID Address space ID of the ICSF subsystem.

Callable Services The number of Callable Services Supported.

CCMK OK Indicating whether DES master key is valid. Valid values are:
  • Unknown=-1
  • No=0
  • Yes=1

CKDS Name Cryptographic Key dataset name.

CPACF Status CP Assist for Cryptograhic Functions. Valid values are:
  • CPACF not available=0x8000
  • SHA-1 available only=0x4000
  • DES/TDES enabled=0x2000
  • SHA-224 and SHA-256 available=0x1000
  • SHA-224 SHA-256 DES and TDES available=0x0800
  • SHA-384 and SHA-512 available=0x0400
  • SHA-384 SHA-512 DES and TDES available=0x0200
  • Encrypted CPACF functions available=0x0100
  • OFB CFB and GCM available=0x0080
  • DRNG available=0x0040
  • TRNG SHA-3 and SHAKE available=0x0020

DES Check Value Key Check Value of DES master key or zero if not supplied.

DSA Status DSA Algorithm Availability. Valid values are:
  • Unknown=-1
  • No=0
  • Yes=1

ECC Check Value Key Check Value of ECC master key or zero if not supplied.

ICSF Status Status of the ICSF subsystem. Valid values are:
  • Unknown=-1
  • Not-Active=0
  • Started=1
  • Initialized=2

ICSF Version ICSF subsystem version and release level.

Managed System Managed system name where this data is collected. It has the format: <plexname>:<smfid>:MVSSYS. <plexname> is the sysplex this LPAR resides in. <smfid> is the system's SMF identifier.

PKA Callable Indicating whether PKA Callable services enabled. Valid values are:
  • Unknown=-1
  • No=0
  • Yes=1

PKDS Name Public Key dataset name.

RSA Check Value Key Check Value of RSA master key or zero if not supplied.

RSA Key Length RSA Signature Key Length. Valid values are:
  • Not Available=0
  • 1024=0x40
  • 2048=0x20
  • 4096=0x10

SMF ID Managed system name where this data is collected.

SS Mode Special Secure Mode Setting. Valid values are:
  • Disabled=0
  • Allowed=1

TKDS Name PKCS #11 Token dataset name.

WLDS Name CICS waitlist dataset name, if it is specified.