Load a new Top Secret LMP key without IPL

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

The new Top Secret LMP key has been added to the CAIOPTN(KEYS) member of CAIRIM. Is there a way to activate it without an IPL?

Environment

z/OS

Resolution

Update the appropriate KEYS member that is referenced in the CAS9 procedure and start CAS9 as follows:

  S CAS9,,,LMPKEYS

This will direct CAIRIM to read only the //KEYS DD statement and ignore all others. There is no requirement to define any product initialization statement in the CARIMPRM member to accomplish the loading or reloading on LMP keys.

To verify in Top Secret that this has completed successfully, enter the following operator command:

  F TSS,LMPCHECK

If LMP key verification completed successfully, then it will be followed the message:

  TSS7450I LMP VERIFICATION COMPLETE