How to load a new CA Top Secret LMP key without an IPL?

Document ID : KB000017217
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

The new CA Top Secret LMP key has been added to the CAIOPTN(KEYS) member of CAIRIM. I would like to need to activate it without an IPL.

Environment:
z/OS
Answer:

Update the appropriate KEYS member that is referenced in the CAS9 procedure and start CAS9 as follows:

  S CAS9,,,LMPKEYS

This will direct CAIRIM to read only the //KEYS DD statement and ignore all others. There is no requirement to define any product initialization statement in the CARIMPRM member to accomplish the loading or reloading on LMP keys.

To verify in CA Top Secret that this has completed successfully, enter the following operator command:

  F TSS,LMPCHECK

If LMP key verification completed successfully, then it will be followed the message:

  TSS7450I LMP VERIFICATION COMPLETE