How to setup CA Tape Encryption for CA-1 only and prohibit other components from checking the license keys

Products

• Tape Encryption

Issue/Introduction

We are running CA Tape Encryption on a system with CA 1 active, and only need the ED key (for the CA Tape Encryption for CA 1 option) and possibly the 0L for Key Manager. We should NOT be running with EB, EC, EE or EF keys when we have CA 1 active.  How can we configure the product so there is no check for the other keys?

Environment

Release : 14.5

Component : CA Tape Encryption

Cause

The CAS9 proc is not configured with the proper keys for the functions which are needed to be active. 

Resolution

The CATE LMP key 'EA' will always be needed for any use of CATE, whether for encryption or decryption.  This single LMP key will provide decryption only (and is considered 'base CATE' in terms of function.  This key can also be referred to as the 'Reader' key).  Any product which is needing to perform encryption will need to activate an additional associated CATE LMP key for that product (such as 'ED' for CA1).  If there is a need to use CATE to decrypt tapes on other systems which are not licensed to encrypt tapes, then only the single LMP key 'EA' is needed.  The full list of LMP Keys can be found at: 

https://techdocs.broadcom.com/content/support/en_us/product-content/recommended-reading/technical-document-index/ca-licensing---lmp-listing.html

Note: Support for all variants of the CATE EKM product have been dropped long ago, as this product has already reached End-Of-Life (EOL) in 2013.