Using the Hardware Service Manager
Hardware service manager is a tool for displaying and working with the i5/OS system hardware from both a logical and a packaging viewpoint, an aid for debugging Input/Output (I/O) processors and devices, and is also used to reinitialize the Cryptographic Coprocessor (set it back to an un-initialized state).
When the Cryptographic Coprocessor is re-initialized, the Cryptographic Coprocessor Licensed Internal Code is reloaded into the Coprocessor. Some but not all program temporary fixes (PTFs) for the Coprocessor licensed internal code may require the use of hardware service manager to activate them. This extra step is included to allow you to prepare for recovery because reloading certain segments of the licensed internal code will cause any configuration data including master keys, retained RSA private keys, roles, and profiles to be lost.
There may be situations where the Cryptographic Coprocessor must be reset back to an unintialized state. For example, if the Coprocessor is not configured correctly, there could be a scenario where the Coprocessor cannot perform any useful function and cannot be corrected using the Cryptographic Coprocessor configuration utility or a user-written application. Another example is if the passwords for the administrative profiles are forgotten and no other profile uses a role that is authorized to change passwords.
Hardware service manager is found in System Service Tools. To use the Hardware service manager, proceed as follows:
- Use the Start System Service Tools (STRSST) CL command by typing STRSST at the CL command line and pressing enter. The System Service Tools Signon display should be shown.
Start Service Tools (STRSST) Sign On SYSTEM: RCHSYS01 Type choice, press Enter. Service tools user . . . . . ________ Service tools password . . . ________ F3=Exit F9=Change Password F12=Cancel- Enter the service tools user profile name and password. The System Service Tools display should appear.
System Service Tools (SST) Select one of the following: 1. Start a service tool 2. Work with active service tools 3. Work with disk units 4. Work with diskette data recovery 5. Work with system partitions 6. Work with system capacity Selection 1 F3=Exit F10=Command entry F12=Cancel- Select 1 to start a service tool and press Enter. The Start a Service Tool display will be shown.
Start a Service Tool Warning: Incorrect use of this service tool can cause damage to data in this system. Contact your service representative for assistance. Select one of the following: 1. Product activity log 2. Trace Licensed Internal Code 3. Work with communications trace 4. Display/Alter/Dump 5. Licensed Internal Code log 6. Main storage dump manager 7. Hardware service manager Selection 7 F3=Exit F12=Cancel F16=SST menu- Select 7 to start Hardware Service Manager. The Hardware Service Manager screen will be displayed showing the menu of available options.
Hardware Service Manager Attention: This utility is provided for service representative use only. System unit . . . . . . . : 9406-270 10-4314M Release . . . . . . . . . : V5R1M0 (1) Select one of the following: 1. Packaging hardware resources (systems, frames, cards,...) 2. Logical hardware resources (buses, IOPs, controllers,...) 3. Locate resource by resource name 4. Failed and non-reporting hardware resources 5. System power control network (SPCN) 6. Work with service action log 7. Display label location work sheet 8. Device Concurrent Maintenance Selection 2 F3=Exit F6=Print configuration F9=Display card gap information F10=Display resources requiring attention F12=Cancel- Select 2 to work with logical hardware resources.
Logical Hardware Resources Select one of the following: 1. System bus resources 2. Processor resources 3. Main storage resources 4. High-speed link resources Selection 1 F3=Exit F6=Print configuration F12=Cancel- From the Logical Hardware Resources screen, select 1 to show system bus resources.
Logical Hardware Resources on System Bus System bus(es) to work with . . . . . . *ALL *ALL, *SPD, *PCI, 1-511 Subset by . . . . . . . . . . . . . . . *CRP *ALL, *STG, *WS, *CMN, *CRP Type options, press Enter. 2=Change detail 4=Remove 5=Display detail 6=I/O Debug 8=Associated packaging resource(s) 9=Resources associated with IOP Resource Opt Description Type-Model Status Name _ HSL I/O Bridge 2249- Operational BC02 _ Bus Expansion Adapter - Operational BCC02 _ System Bus 2249- Operational LB01 _ Multi-Adapter Bridge 2249- Operational PCI01D _ Combined Function IOP * < 284D-001 Operational CMB01 _ HSL I/O Bridge 283B- Operational BC01 _ Bus Expansion Adapter - Operational BCC03 More... F3=Exit F5=Refresh F6=Print F8=Include non-reporting resources F9=Failed resources F10=Non-reporting resources F11=Display serial/part numbers F12=Cancel- If you know which IOP contains the Cryptographic Coprocessor, type 9 next to the IOP. Otherwise, subset the list by typing *CRP for Subset by field and then type 9 next to the IOP containing the Cryptographic Coprocessor. You should then see the Logical Hardware Resources Associated with IOP display.
Logical Hardware Resources Associated with IOP Type options, press enter. 2=Change detail 4=Remove 5=Display detail 6=I/O Debug 7=Verify 8=Associated packaging resource(s) Resource Opt Description Type-Model Status Name _ Combined function IOP * < 284D-001 Operational CMB01 _ Cryptography Adapter 4758-023 Operational CRPCTL01 6 Cryptography Device 4758-023 Operational CRP01 _ Workstation IOA 2746-001 Operational CTL01 _ Display Station 3477-0FC Operational DSP001 _ Display Station 3477-0FC Operational DSP002 _ Communications IOA 2745-001 Operational LIN01 _ Communications Port 2745-001 Operational CMN01 _ Communications Port 2745-001 Operational CMN02 _ Communications IOA 2744-001 Operational LIN03 _ Communications Port 2744-001 Operational CMN03 More... F3=Exit F5=Refresh F6=Print F8=Include non-reporting resources F9=Failed resources F10=Non-reporting resources F11=Display serial/part numbers F12=Cancel- Type 6 next to the cryptography device that you want to reinitialize, and then press Enter.
Select Cryptography Debug Function Select one of the following: 1. Reinitialize Flash Memory 2. Select IOP Debug Function Selection 1 F3=Exit F12=Cancel- Select 1 to reinitialize flash memory (reload the Cryptographic Coprocessor Licensed Internal Code). A confirmation screen will be displayed. If you are applying a PTF ensure that you have taken the necessary precautions regarding your encrypted data and keys, and have a backup of the master key. Press Enter to continue.
Reinitialize Flash Memory Function DANGER: Performing this initialization of the flash memory on the cryptography device will cause ALL key information stored on the device to be DESTROYED. This will cause all data encrypted using this device to be rendered unusable. WARNING: Performing this initialization of the flash memory on the cryptography device will take an estimated 10 minutes. Press Enter to proceed. F3=Exit F12=CancelThe following screen showing status of the reinitialization will be displayed and updated until reinitialization is complete.
Reinitialize Flash Memory Status Flash memory reinitialization in progress... Estimated time: 10.0 minutes Elapsed time: 2.5 minutesWhen reinitialization is complete, a message will be displayed.
Select Cryptography Debug Function Select one of the following: 1. Reinitialize Flash Memory 2. Select IOP Debug Function Selection _ F3=Exit F12=Cancel Reinitialization of cryptography device was successful.After reinitialization is complete, exit all the way out of system service tools by pressing function key F3 on each screen as necessary.
Parent topic:
Troubleshooting the Cryptographic CoprocessorRelated concepts
Reinitializing the Cryptographic Coprocessor