Cryptographic Services are documented at:
https://www-01.ibm.com/servers/resourcelink/svc00100.nsf/pages/zOSV2R3GA320889/$file/e0zm100_v2r3.pdf
This documents the actions to perform before the first IPL of z/OS V2R3. This topic describes Cryptographic Services migration actions that you can perform after you have installed z/OS V2R3, but before the first time you IPL. These actions might require the z/OS V2R3 level of code to be installed, but do not require it to be active. Are there any other concerns?
Release :
Component : CA Top Secret for z/OS
According to the documentation, there are some security setup required that need to be in place before Cryptography is brought up. Aside from following the security setup indicated in the documentation, there are no other concerns.