How to update the CA Spool LMP keys without the need to perform an IPL

Products

• Spool

Issue/Introduction

After removing LMP keys 02 and JX and activating the replacement LMP key 3B, the following messages still appear in the SYSLOG: 

CAS9013A    Product JX about to expire or is expired and is in use

CAS9013A    Product 02 about to expire or is expired and is in use

 Another symptom if the key is not yet expired is:

CAS9182A - WARNING: LMP key Prod (JX)                      expires in nnn days

Additionally, the SMF89 records still contain information about LMP keys 02 and JX instead of LMP key 3B.

 

Can old LMP keys be removed without the need to perform an IPL?

Environment

Release: 14.0

Component: CA Spool

Cause

The old LMP keys were not updated with DELETE parameter in the LMP keys file before the CAIRIM was run to refresh the LMP component.

Resolution

To update the LMP keys without an IPL, perform the following steps:

1. Stop the CA Spool region.
   
   2. Update the CA Spool LMP keys that you don’t want to use with a DELETE parameter, and add the new CA Spool LMP keys.

For example, if you want to replace the LMP keys for the C transformers (JX for A2PC, J1 for A2PS, and 02 for A2PD) with corresponding LMP key for the Java transformers (3B for A2yy), update the LMP keys file as follows:

Prod(JX) Date(ddmmmyy) CPU(tttt-mmmm/ssssss) LMPCODE(XXXXXXXXXXXXXXXX) DELETE
Prod(J1) Date(ddmmmyy) CPU(tttt-mmmm/ssssss) LMPCODE(YYYYYYYYYYYYYYYY) DELETE
Prod(02) Date(ddmmmyy) CPU(tttt-mmmm/ssssss) LMPCODE(ZZZZZZZZZZZZZZZZ) DELETE
Prod(3B) Date(ddmmmyy) CPU(tttt-mmmm/ssssss) LMPCODE(AAAAAAAAAAAAAAAA)

Note that the keys with DELETE parameter are not actually removed from the system, they are just bypassed when scanning for violations.

3. To refresh the LMP component, add the following parameter statement in the CAIRIM parmlib member CAW0OPTN(CARIMPRM), and then invoke CAIRIM:

PRODUCT(CAIRIM) VERSION(CAS9) INIT(CAS9INIT) PARM(REFRESH(LMP))

The following messages are displayed in the system log:

CAS9174I - CA-LMP SITEID CONTROL CARD PROCESSED FOR SITE(ssssss)
CAS9175I - CLIENT NAME (cccc)
CAS9191I - PRODUCT (JX) KEY REMOVED FROM THIS CPU
CAS9191I - PRODUCT (J1) KEY REMOVED FROM THIS CPU
CAS9191I - PRODUCT (02) KEY REMOVED FROM THIS CPU
CAS9028I - REFRESH COMPLETE FOR LOAD MODULE *CA-LMP*
CAS9130I - MODULE CAS9INIT COMPLETE, RC=00

4. Start the CA Spool region. With the above example, the ESFLOG displays the following:

OPERATOR 10:19:58 _ESF719  CA Spool PACKAGE option enabled
OPERATOR 10:19:58 _ESF719  CA Spool  A2yy   option enabled

5. If you want to remove the unneeded LMP keys permanently, remove the following statements from the LMP keys file prior to the standard IPL:

Prod(JX) Date(ddmmmyy) CPU(tttt-mmmm/ssssss) LMPCODE(XXXXXXXXXXXXXXXX) DELETE
Prod(J1) Date(ddmmmyy) CPU(tttt-mmmm/ssssss) LMPCODE(YYYYYYYYYYYYYYYY) DELETE
Prod(02) Date(ddmmmyy) CPU(tttt-mmmm/ssssss) LMPCODE(ZZZZZZZZZZZZZZZZ) DELETE