After they are activated, the active partition cryptographic definitions can be viewed from the  SE. Select the CPCs, and click  View LPAR Cryptographic Controls  in the CPC Operational  Customization window. The resulting window displays the definition of Usage and Control  domain indexes, and PCI Cryptographic candidate and online lists, as shown in Figure 6-7.  Information is provided only for active logical partitions. Operational changes can be made by using the Change LPAR Cryptographic Controls task  from the SE, which reflects the cryptographic definitions in the image profile for the partition.  With this function, the cryptographic feature can be added and removed dynamically, without  stopping a running operating system. For more information about the management of Crypto Express6S cards, see  IBM z14 (3906) Configuration Setup,  SG24-8460. The TKE workstation is an optional feature that offers key management functions. A TKE  tower workstation feature (FC #0085) is required for z14 servers to manage the Crypto  Express6S feature. A TKE rack-mounted workstation feature (FC #0086) is required for z14  servers to manage the Crypto Express5S feature. The TKE contains a combination of hardware and software. A mouse, keyboard, flat panel  display, PCIe adapter, and a writable USB media to install the TKE LIC are included with the  system unit. The TKE workstation requires an IBM 4768 crypto adapter. A TKE workstation is part of a customized solution for using the Integrated Cryptographic  Service Facility for z/OS (ICSF for z/OS) or Linux for z Systems. This program provides a  basic key management system for the cryptographic keys of a z14 server that has Crypto  Express features installed. 6.6 TKE workstation 232  IBM z14 (3906) Technical Guide Figure 6-7 SE: View LPAR Cryptographic Controls