IBM Crypto Education Community

  • 1.  ICSF : OUTPUT KEYS DS NOT EMPTY

    Posted Thu January 21, 2021 09:01 AM
    Dear ,

    When I'm trying to use the ICSF option:to do an initialization with pass phrase


    I'm getting the message " OUTPUT KEYS DS NOT EMPTY" . 
    How can I easily empty the dataset ( it's a test system ) ? Is there an option or utility to do that ( except from the SE to zeroize) ?

    Thanks for your advise .

    Regards,
    PS:
    I'm getting such in a system where it's the first time that the crypto card is configured online with a specific index domain ; how it's possible that there were already the  4 MKs loaded ?




    ------------------------------
    Nordine
    ------------------------------


  • 2.  RE: ICSF : OUTPUT KEYS DS NOT EMPTY

    Posted Fri January 22, 2021 08:13 AM
    Since this is a test system and is intended to be a fresh install - it might be best to allocate new KDS datasets and update your Installation Options Dataset keywords CKDSN and PKDSN to point to the new datasets. There is no utility to empty a dataset, and a zeroize from the SE does not touch ICSF - only the coprocessor itself.

    ------------------------------
    Bob Petti
    ------------------------------