IBM Crypto Education Community

IBM Crypto Education Community

IBM Crypto Education Community

Join the IBM Crypto Education community to explore and understand IBM cryptography technology. This community is operated and maintained by the IBM Crypto Development team.

 View Only
  • 1.  ICSF : OUTPUT KEYS DS NOT EMPTY

    Posted Thu January 21, 2021 09:01 AM
    Dear ,

    When I'm trying to use the ICSF option:to do an initialization with pass phrase


    I'm getting the message " OUTPUT KEYS DS NOT EMPTY" . 
    How can I easily empty the dataset ( it's a test system ) ? Is there an option or utility to do that ( except from the SE to zeroize) ?

    Thanks for your advise .

    Regards,
    PS:
    I'm getting such in a system where it's the first time that the crypto card is configured online with a specific index domain ; how it's possible that there were already the  4 MKs loaded ?




    ------------------------------
    Nordine
    ------------------------------


  • 2.  RE: ICSF : OUTPUT KEYS DS NOT EMPTY

    Posted Fri January 22, 2021 08:13 AM
    Since this is a test system and is intended to be a fresh install - it might be best to allocate new KDS datasets and update your Installation Options Dataset keywords CKDSN and PKDSN to point to the new datasets. There is no utility to empty a dataset, and a zeroize from the SE does not touch ICSF - only the coprocessor itself.

    ------------------------------
    Bob Petti
    ------------------------------