International Business Machines Corporation

Louis P Gomes

Ali Y Duale

Shailesh Ratilal Gami

Rajaram B Krishnamurthy

Vijai Kalathur

Muneeb Arshad

John S Werner

Arkadiy O Tsfasman

Matthias Klein

Anthony Thomas Sofia

Bruce C Giamei

Mark S Farrell

Richard Victor Kisley

Timothy J Siegel

Richard John Moore

Timothy John Slegel

Damian Leo Osisek

Reinhard Theodor Buendgen

David Harold Surman

Patricia G Driever

Michael D Hocker

James H Mulder

Martin Schwidefsky

Klaus Werner

Eric David Rossman

Simon Weishaupt

Mahmoud Amin

Volker Urban

Harald Freudenberger

Viktor Mihajlovski

Seth E Lederer

A method, computer program product, and computer system are provided. A machine hypervisor builds and enqueue a zeroize adjunct processor (AP) domain (ZAPD) common command request message to a target AP domain queue. Machine firmware validates the enqueued common command request message on the target AP domain queue. The machine firmware converts the ZAPD command request to the mode-specific form of the domain zeroize request. A command request message is executed at an AP crypto adapter of the target AP domain. Executing includes zeroizing a storage area of the AP crypto adapter. The execution results are returned to the machine firmware. The machine firmware converts the crypto card mode's ZAPD command reply message into the common ZAPD command reply message. The final execution results including the converted common ZAPD command reply message are returned to the machine hypervisor.

Adjunct processor (AP) domain zeroize

Method, computer program product, and computer system are provided. Program queries for an indicator of dependency between a usage domain and a control domain in a virtual machine (VM) configuration having a cryptographic AP adapter. The VM and the cryptographic AP adapter are both installed on a hardware server. Program sets an internal bitmap based on a result and generates one or more sets of AP commands, based on the setting of the internal bitmap. The sets of AP commands are directed to an adjunct processor (AP) message queue on a cryptographic AP in the VM configuration. Program enqueues the one or more sets of program instructions to the VM having an identifier corresponding to an offset in the program internal bitmap. Program receives status at completion of the one or more sets of AP commands from the VM having the cryptographic AP in the VM configuration.

Featureless machine enhancement discovery and verification

An instruction that includes an operation code indicating a diagnose operation is obtained and executed within a computing environment. The executing the instruction includes retrieving selected data from a dump save area to be used to restore machine state and restoring the machine state. The restoring includes storing the selected data in a selected location. One or more storage keys used to protect access to the selected data are restored.

Diagnose instruction to restore machine state and associated storage keys

Adjunct processor command-type filtering includes determining whether a target adjunct processor is configured to support a selected command-type filtering mode, and whether another adjunct processor is configured to support the selected command-type filtering mode. Based on determining that the target adjunct processor is not configured to support the selected command-type filtering mode and based on the other adjunct processor being configured to support the selected command-type filtering mode, a command is forwarded to the other adjunct processor for processing to determine whether the command is valid for the selected command-type filtering mode. An indication is obtained, based on processing at the other adjunct processor, of whether the command is valid for the selected command-type filtering mode. Based on obtaining an indication that the command is valid for the selected command-type filtering mode, the command is sent to the target adjunct processor for execution.

Adjunct processor command-type filtering

A message limit value to be used in enqueuing one or more messages on a queue of a device of the computing environment is obtained. The message limit value indicates whether an extended maximum message length is supported by the device. The extended maximum message length is different from a default maximum message length supported by the device. Based on determining that the extended maximum message length is supported and that the obtained message limit value has a defined relationship with a select value, at least one message of an extended length is enqueued on the queue of the device.

Adjunct processor extended message limit facility

A method, computer program product, and computer system are provided. A message storage area of an adjunct processor (AP) crypto adapter is filled with a plurality of command request messages sufficient to maximize utilization and performance of the AP crypto adapter. In response to detecting an error during execution of one of the plurality of command request messages, generating an AP crypto adapter command reply message. The AP crypto adapter command reply message includes the error. In response to the error being a non-recoverable failure, determining a state of the command request message, wherein the state of the command request message comprises an in-process state or a request-pending state. The AP crypto adapter command reply message is formatted, wherein the formatted AP crypto adapter command reply message is stored in a message queue in the AP crypto adapter pending completion of machine failure recovery. The AP crypto adapter is recovered.

Managing machine failure

An initial program load of a system component of a computing environment is performed. A determination is made as to whether one or more signatures of one or more signed binary code components relating to the system component are verified. Based on determining that the one or more signatures are verified, additional verification is performed. The additional verification includes obtaining a select binary code component of one or more binary code components relating to the system component and determining whether the select binary code component is a particular signed binary code component. Based on determining that the select binary code component is the particular signed binary code component, a check is performed. The initial program load is continued based on a successful check.

Secure initial program load

A method, computer program product, and computer system are provided. An operating system (OS) receives a status at completion of a cryptographic adjunct process (AP) instruction directed to an AP message queue on a cryptographic AP. The status includes a return code, a reason code, a queue full indicator, a queue empty indicator, and the count of enqueued request messages on the AP message queue. The OS determines a number of lost request messages on the AP message queue, based on a count of enqueued request messages on the AP message queue received in the status. The OS re-enqueues the number of lost request messages to the AP message queue. The OS recovers the number of lost request messages on the AP message queue.

Detecting and recovering lost adjunct processor messages

An adjunct processor dynamically determines, on a per-command basis, whether commands obtained by the adjunct processor are to be processed by the adjunct processor. The adjunct processor obtains a command request of a requester. The command request includes at least one filtering indicator indicating at least one valid command type for processing by the adjunct processor for the requester. The adjunct processor determines using the at least one filtering indicator whether a command of the command request is valid for processing by the adjunct processor for the requester. Based on determining that the command is valid for processing by the adjunct processor, the command is processed by the adjunct processor.

Command-type filtering based on per-command filtering indicator

A method is provided that is executable by a processor of a computer. Note that the processor is communicatively coupled to a memory of the computer, and the memory stores a response block of a call command. In implementing the method, the processor defines a sub-functions field in the response block of the call command. Further the processor indicates that a set of functions of a set of instructions are installed and available at an interface based on a corresponding sub-functions flag within the sub-functions field being set. Note that the interface is also being executed on the computer and that the set of functions being represented by the corresponding sub-functions flag. The processor further indicates that the set of functions of the set of instructions are not installed based on the corresponding sub-functions flag not being set.

Extended asynchronous data mover functions compatibility indication

A processor requests that a data transformation operation be performed using another processor, in which the data transformation operation is performed asynchronously. A determination is made that the data transformation operation performed using the other processor has completed unsatisfactorily, and based on the unsatisfactory completion, status relating to performance of the data transformation operation is incomplete. The data transformation operation is then re-executed synchronously using the one processor, and the re-executing provides status information unavailable in performing the data transformation operation asynchronously.

Synchronous re-execution of a data transformation operation to obtain further details regarding an exception

According to one or more embodiments of the present invention, computer implemented method includes obtaining by an input/output (I/O) subsystem a request block that includes a command code indicating a STORE IOP-UTILIZATION DATA command for tracking resource utilization during an asynchronous execution of an instance of a CPU DEFLATE command. The method further includes, based on the command code, initiating a command response block. The command response block includes multiple entries for input/output processor (IOP) utilization, each entry corresponding to resource utilization measurements of each IOP in the I/O subsystem. The method further includes, storing, in a command response code field of the command response block, a response code indicating that the resource utilization measurements have been recorded in the entries for IOP utilization. The response block includes a length code indicating a length of the response block and the response code field.

Compression measurement for computer servers

A selected system obtains from a selected location software features information relating to another system. Using the software features information obtained from the selected location, a determination is made as to whether a selected license tier has been obtained. Based on determining that the selected license tier has been obtained, the selected system dispatches work of the other system into a container of the selected system.

System obtains software features information of another system

Enqueue-related processing is provided based on occurrence of a defined action in connection with an attempted enqueue to a queue, such as to an adjunct processor queue. The processing includes attempting enqueuing a request to a queue until a defined action occurs, which indicates an unsuccessful enqueuing of the request. Based on occurrence of the defined action, the process includes determining a likely cause for the enqueuing being unsuccessful, and based on determining the likely cause, the process includes performing one or more actions to facilitate enqueue-related processing within the computing environment.

Growing community of inventors

Poughkeepsie, NY, United States of America

Louis P Gomes