IBM i Global

 View Only

4767 Crypto Card Web Utility - missing available commands in profile config

  • 1.  4767 Crypto Card Web Utility - missing available commands in profile config

    Posted Mon March 20, 2023 09:26 AM

    I'm able to call many of the CCA verbs to query status, generate keys and perform symmetric encryption and decryption.  This is on V7R4 and CSUACFQ reports CCA version of 5.6.9.  The Web Utility shows the cryptographic coprocessor has an "Active" status.

    The problem I'm having is that the Available Commands list on the Role configuration page is missing a number of expected commands.  For example, verb CSUALGQ requires commands X'0034' - X'0037' but none of those are in the list.

    In trying to call CSNBSAE with AES-GCM it returns 8/90 indicating the profile lacks the required command.  However, I can't add the X'01CD' command to the profile because it's also not in the list.

    It seems like maybe something was misconfigured when setting up 4767 but I really have no idea what to check.  I'd appreciate guidance in resolving this issue.

    Thanks.



    ------------------------------
    Niko Vasiliou
    ------------------------------