Figure 10-2 Customize Image Profiles: Crypto The cryptographic resource definitions include the following meanings: Identifies the cryptographic coprocessor domains that can be administered from this  logical partition if it is being set-up as the TCP/IP host for the TKE. If you are setting up the host TCP/IP in this logical partition to communicate with the TKE,  the partition is used as a path to other domains’ Master Keys. Indicate all the control  domains that you want to access (including this partition’s own control domain) from this  partition. Identifies the cryptographic coprocessor domains that are assigned to the partition for all  cryptographic coprocessors that are configured on the partition. The usage domains  cannot be removed if they are online.  The numbers that are selected must match the domain numbers that are entered in the  Options data set when you start this partition instance of ICSF. The same usage domain index can be used by multiple partitions regardless to which CSS  they are defined. However, the combination of PCIe adapter number and usage domain  index number must be unique across all active partitions. Identifies the cryptographic coprocessor numbers that are eligible to be accessed by this  logical partition. From the list, select the coprocessor numbers (in the range 0 - 15) that  identify the PCIe adapters to be accessed by this partition. No error condition is reported when a cryptographic coprocessor number, which is  selected in the partition candidate list, is available to the partition when the partition is  activated because it is configured off or not installed. The cryptographic coprocessor  number is ignored and the activation process continues. GLYPH<SM590000> Control Domain GLYPH<SM590000> Control and Usage Domain GLYPH<SM590000> Cryptographic Candidate list 222  IBM z14 Model ZR1 Configuration Setup