When you add or change the control or usage domain index and cryptographic coprocessor  number dynamically for a running system, a confirmation message is displayed. After  processing, a status window opens that indicates the result of a dynamic addition or change  of a cryptographic definition to an LPAR (see Figure 10-7). You can remove the cryptographic definition from a logical partition dynamically by using the  Change LPAR Cryptographic Controls task. This section addresses the related issues and  describes the procedure. Figure 10-7 SE: Change LPAR Cryptographic Controls Figure 10-8 SE: Change LPAR Cryptographic Controls: ACT33679 Dynamic removal of the cryptographic definition Complete the following steps: 1. Before you change the cryptographic settings by using the Change LPAR Cryptographic  Controls task, verify that the cryptographic lists you want to remove from a logical partition  are offline (Standby). For more information about setting the cryptographic channel status,  see “Configuring a Crypto Express6S online or offline on a logical partition” on page 235.  If you try to remove the lists dynamically while they are online, the change fails and you  receive the message that is shown in Figure 10-8. In addition to adding or changing cryptographic settings for a logical partition, you can  remove the Control and Usage domains or Cryptographic Candidate lists for a logical  partition from the Change LPAR Cryptographic Controls window (see Figure 10-6 on  page 226).  After clearing the definitions for a logical partition, remove a definition dynamically by  clicking  Change Running System . To save the new configuration to the Image Profile  without changing the running system, select  Save to Profiles . With  Save and Change ,  the removal becomes concurrently active, and the removed cryptographic coprocessor  also cannot be used for the next image activation. Chapter 10. Specialized features  227