Migrating IBM Hyper Protect Crypto Service Instance (IBM HPCS)

IBM Hyper Protect Crypto Services is taking advantage of new features and capabilities in VPC environments. IBM HPCS instances will transition from an IBM Cloud Classic data center to an IBM Virtual Private Cloud Data Center.

What does this mean for you? You will have access to the latest technology faster, instead of waiting on releases for classic infrastructure. VPC architecture allows for greater flexibility of deployments, making it easier to deploy new instances, new crypto units, or new vaults and keystores.  The change will also allow for improved services to be offered in the future.

If you are currently using a data center in Dallas, Washington, DC or Frankfurt, you will need to perform some changes to ensure nothing is lost during the transition to the latest release. A full guide to migrating your services can be found here (the document takes precedent over everything here).  The key points in the process are:

• ·      For each crypto unit in the HPCS instance currently running in a classic datacenter, IBM will assist in migration to the VPC environment with customers involvement
• ·      These crypto units will be part of the same HPCS instance and the instance id will not change
• ·      Initializing the new crypto units is the responsibility of the end customer, using the IBM guide here with IBM customer support.

To ensure that you do not lose any crypto keys or keystores or incur any additional costs:

• ·      DO NOT generate new keys, as this could result in loss of access to data
• ·      DO NOT create new smart cards or new key part files (if used when creating the HPCS instance)
• ·      DO NOT modify any crypto units currently on IBM Cloud Classic before the transition is complete

This is a joint exercise between IBM and the Customer, requiring both to be in sync.

If you have any questions or need assistance, please reach out to the IBM Z ScaleUp Program at ibmzscaleup@ibm.com

Join the IBM Z ScaleUp Program community page for updates! You can also see our latest news here.