Using the Hardware Service Manager

 

Hardware service manager is a tool for displaying and working with the i5/OS system hardware from both a logical and a packaging viewpoint, an aid for debugging Input/Output (I/O) processors and devices, and is also used to reinitialize the Cryptographic Coprocessor (set it back to an un-initialized state).

When the Cryptographic Coprocessor is re-initialized, the Cryptographic Coprocessor Licensed Internal Code is reloaded into the Coprocessor. Some but not all program temporary fixes (PTFs) for the Coprocessor licensed internal code may require the use of hardware service manager to activate them. This extra step is included to allow you to prepare for recovery because reloading certain segments of the licensed internal code will cause any configuration data including master keys, retained RSA private keys, roles, and profiles to be lost.

There may be situations where the Cryptographic Coprocessor must be reset back to an unintialized state. For example, if the Coprocessor is not configured correctly, there could be a scenario where the Coprocessor cannot perform any useful function and cannot be corrected using the Cryptographic Coprocessor configuration utility or a user-written application. Another example is if the passwords for the administrative profiles are forgotten and no other profile uses a role that is authorized to change passwords.

Hardware service manager is found in System Service Tools. To use the Hardware service manager, proceed as follows:

  1. Use the Start System Service Tools (STRSST) CL command by typing STRSST at the CL command line and pressing enter. The System Service Tools Signon display should be shown.
                                    Start Service Tools (STRSST) Sign On 
                                                             SYSTEM:  RCHSYS01 Type choice, press Enter.
    
       Service tools user . . . . . ________
       Service tools password . . . ________
    
    
    
    
    
    
    
    
    
    
    
    F3=Exit       F9=Change Password       F12=Cancel

  2. Enter the service tools user profile name and password. The System Service Tools display should appear.
                                    System Service Tools (SST) 
     Select one of the following: 
          1. Start a service tool 
          2. Work with active service tools 
          3. Work with disk units 
          4. Work with diskette data recovery       5. Work with system partitions       6. Work with system capacity 
    
    
    
    
     Selection      1 
     F3=Exit        F10=Command entry         F12=Cancel

  3. Select 1 to start a service tool and press Enter. The Start a Service Tool display will be shown.
                                  Start a Service Tool 
     Warning: Incorrect use of this service tool can cause damage  to data in this system. Contact your service representative  for assistance.
    
     Select one of the following: 
          1. Product activity log       2. Trace Licensed Internal Code       3. Work with communications trace       4. Display/Alter/Dump       5. Licensed Internal Code log       6. Main storage dump manager       7. Hardware service manager 
    
    
     Selection       7 
     F3=Exit          F12=Cancel         F16=SST menu

  4. Select 7 to start Hardware Service Manager. The Hardware Service Manager screen will be displayed showing the menu of available options.
                                  Hardware Service Manager 
     Attention: This utility is provided for service representative use only.
    
        System unit . . . . . . . :  9406-270 10-4314M     Release . . . . . . . . . :  V5R1M0 (1)
    
     Select one of the following: 
        1. Packaging hardware resources (systems, frames, cards,...)
        2. Logical hardware resources (buses, IOPs, controllers,...)
        3. Locate resource by resource name     4. Failed and non-reporting hardware resources     5. System power control network (SPCN)
        6. Work with service action log 
        7. Display label location work sheet     8. Device Concurrent Maintenance 
     Selection       2 
     F3=Exit      F6=Print configuration       F9=Display card gap information  F10=Display resources requiring attention       F12=Cancel

  5. Select 2 to work with logical hardware resources.
                                  Logical Hardware Resources                                                
    
    Select one of the following: 
         1. System bus resources      2. Processor resources      3. Main storage resources      4. High-speed link resources 
     
     
    
    
    
    
    
    
    
    Selection      1 
    F3=Exit        F6=Print configuration         F12=Cancel  

  6. From the Logical Hardware Resources screen, select 1 to show system bus resources.
                         Logical Hardware Resources on System Bus 
     System bus(es) to work with . . . . . . *ALL *ALL, *SPD, *PCI, 1-511  Subset by . . . . . . . . . . . . . . . *CRP *ALL, *STG, *WS, *CMN, *CRP 
     Type options, press Enter.
       2=Change detail    4=Remove     5=Display detail    6=I/O Debug    8=Associated packaging resource(s)      9=Resources associated with IOP 
                                                                     Resource  Opt Description                   Type-Model   Status           Name   _ HSL I/O Bridge                  2249-       Operational      BC02           
      _  Bus Expansion Adapter              -       Operational      BCC02          
      _   System Bus                    2249-       Operational      LB01           
      _    Multi-Adapter Bridge         2249-       Operational      PCI01D         
      _     Combined Function IOP  * <  284D-001    Operational      CMB01         
      _ HSL I/O Bridge                  283B-       Operational      BC01           
      _  Bus Expansion Adapter              -       Operational      BCC03          
                                                                           More...
    
    
    
    
    
     F3=Exit    F5=Refresh   F6=Print    F8=Include non-reporting resources  F9=Failed resources     F10=Non-reporting resources  F11=Display serial/part numbers     F12=Cancel

  7. If you know which IOP contains the Cryptographic Coprocessor, type 9 next to the IOP. Otherwise, subset the list by typing *CRP for Subset by field and then type 9 next to the IOP containing the Cryptographic Coprocessor. You should then see the Logical Hardware Resources Associated with IOP display.
                    Logical Hardware Resources Associated with IOP 
    
     Type options, press enter.
       2=Change detail     4=Remove    5=Display detail    6=I/O Debug    7=Verify            8=Associated packaging resource(s)
    
                                                                     Resource  Opt Description                Type-Model  Status               Name   _  Combined function IOP  * <  284D-001   Operational          CMB01         
      _   Cryptography Adapter       4758-023   Operational          CRPCTL01       
      6    Cryptography Device       4758-023   Operational          CRP01   _   Workstation IOA            2746-001   Operational          CTL01   _    Display Station           3477-0FC   Operational          DSP001   _    Display Station           3477-0FC   Operational          DSP002           
      _   Communications IOA         2745-001   Operational          LIN01            
      _    Communications Port       2745-001   Operational          CMN01            
      _    Communications Port       2745-001   Operational          CMN02            
      _   Communications IOA         2744-001   Operational          LIN03          
      _    Communications Port       2744-001   Operational          CMN03           
                                                                            More...
     F3=Exit    F5=Refresh    F6=Print    F8=Include non-reporting resources  F9=Failed resources      F10=Non-reporting resources  F11=Display serial/part numbers      F12=Cancel 

  8. Type 6 next to the cryptography device that you want to reinitialize, and then press Enter.
                                   Select Cryptography Debug Function 
    Select one of the following: 
         1. Reinitialize Flash Memory      2. Select IOP Debug Function 
    
    
    
    
    
    
    
    
    
    
    
    
    Selection      1 
    F3=Exit      F12=Cancel 

  9. Select 1 to reinitialize flash memory (reload the Cryptographic Coprocessor Licensed Internal Code). A confirmation screen will be displayed. If you are applying a PTF ensure that you have taken the necessary precautions regarding your encrypted data and keys, and have a backup of the master key. Press Enter to continue.
                                   Reinitialize Flash Memory Function 
    DANGER: 
      Performing this initialization of the flash memory on the cryptography   device will cause ALL key information stored on the device to be   DESTROYED. This will cause all data encrypted using this device to be   rendered unusable.
    
    
    WARNING: 
      Performing this initialization of the flash memory on the cryptography   device will take an estimated 10 minutes. 
    
    
    
    
    
    Press Enter to proceed.
    
    F3=Exit      F12=Cancel

The following screen showing status of the reinitialization will be displayed and updated until reinitialization is complete.

                               Reinitialize Flash Memory Status 


 Flash memory reinitialization in progress...


 Estimated time: 10.0 minutes 
 Elapsed time:    2.5 minutes 











When reinitialization is complete, a message will be displayed.

                               Select Cryptography Debug Function 
 Select one of the following: 
      1. Reinitialize Flash Memory       2. Select IOP Debug Function 












 Selection      _

 F3=Exit      F12=Cancel  Reinitialization of cryptography device was successful.

After reinitialization is complete, exit all the way out of system service tools by pressing function key F3 on each screen as necessary.

 

Parent topic:

Troubleshooting the Cryptographic Coprocessor

Related concepts
Reinitializing the Cryptographic Coprocessor