IBM i Global

IBM i 

A space for professionals working with IBM’s integrated OS for Power systems to exchange ideas, ask questions, and share expertise on topics like RPG and COBOL development, application modernization, open source integration, system administration, and business continuity.


#Power


#IBMi
#Power
 View Only

4767 Crypto Card Web Utility - missing available commands in profile config

  • 1.  4767 Crypto Card Web Utility - missing available commands in profile config

    Posted Mon March 20, 2023 09:26 AM

    I'm able to call many of the CCA verbs to query status, generate keys and perform symmetric encryption and decryption.  This is on V7R4 and CSUACFQ reports CCA version of 5.6.9.  The Web Utility shows the cryptographic coprocessor has an "Active" status.

    The problem I'm having is that the Available Commands list on the Role configuration page is missing a number of expected commands.  For example, verb CSUALGQ requires commands X'0034' - X'0037' but none of those are in the list.

    In trying to call CSNBSAE with AES-GCM it returns 8/90 indicating the profile lacks the required command.  However, I can't add the X'01CD' command to the profile because it's also not in the list.

    It seems like maybe something was misconfigured when setting up 4767 but I really have no idea what to check.  I'd appreciate guidance in resolving this issue.

    Thanks.



    ------------------------------
    Niko Vasiliou
    ------------------------------