This topic describes the servers on which the cryptographic hardware
features are available.
IBM z13
The
IBM z13 provides
constraint relief and addresses various customer demands. It has several
cryptographic features.
- CP Assist for Cryptographic Functions is implemented on every
processor. SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512 secure hashing
is directly available to application programs.
- Feature code 3863, CP Assist for Cryptographic Functions (CPACF)
DES/TDES Enablement - enables clear key DES and TDES instructions
on all CPs. AES 128-bit, AES 192-bit and AES 256-bit support is also
available.
- Feature code 0890, Crypto Express5 Feature - optional, and only
available if you have feature 3863, CPACF DES/TDES Enablement installed.
The IBM z13 can
support a maximum of 16 features. Each feature code has one hardware
feature which can be configured as a CCA coprocessor, a PKCS #11 coprocessor,
or an accelerator.
IBM zEnterprise EC12 (zEC12)
The IBM zEnterprise
EC12 provides constraint relief and addresses various customer demands.
It has several cryptographic features.
- CP Assist for Cryptographic Functions is implemented on every
processor. SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512 secure hashing
is directly available to application programs.
- Feature code 3863, CP Assist for Cryptographic Functions (CPACF)
DES/TDES Enablement - enables clear key DES and TDES instructions
on all CPs. AES 128-bit, AES 192-bit and AES 256-bit support is also
available.
- Feature code 0864, Crypto Express3 Feature - optional, and only
available if you have feature 3863, CPACF DES/TDES Enablement installed.
The IBM zEnterprise EC12 can support a maximum of 8 features. Each
feature code has two coprocessors/accelerators.
- Feature code 0865, Crypto Express4 Feature - optional, and only
available if you have feature 3863, CPACF DES/TDES Enablement installed.
The IBM zEnterprise EC12 can support a maximum of 16 features. Each
feature code has one hardware feature which can be configured as a
CCA coprocessor, a PKCS #11 coprocessor, or an accelerator.
IBM zEnterprise BC12 (zBC12)
The IBM zEnterprise
BC12 provides constraint relief and addresses various customer demands.
It has several cryptographic features.
- CP Assist for Cryptographic Functions is implemented on every
processor. SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512 secure hashing
is directly available to application programs.
- Feature code 3863, CP Assist for Cryptographic Functions (CPACF)
DES/TDES Enablement - enables clear key DES and TDES instructions
on all CPs. AES 128-bit, AES 192-bit and AES 256-bit support is also
available.
- Feature code 0864, Crypto Express3 Feature - optional, and only
available if you have feature 3863, CPACF DES/TDES Enablement installed.
The IBM zEnterprise BC12 can support a maximum of 8 features. Each
feature code has two coprocessors/accelerators.
- Feature code 0865, Crypto Express4 Feature - optional, and only
available if you have feature 3863, CPACF DES/TDES Enablement installed.
The IBM zEnterprise BC12 can support a maximum of 16 features. Each
feature code has one hardware feature which can be configured as a
CCA coprocessor, a PKCS #11 coprocessor, or an accelerator.
IBM zEnterprise 196 (z196) and IBM zEnterprise 114
(z114)
The IBM zEnterprise 196 provides constraint relief
and addresses various customer demands. It has several cryptographic
features.
- CP Assist for Cryptographic Functions is implemented on
every processor. SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512 secure
hashing is directly available to application programs.
- Feature code 3863, CP Assist for Cryptographic Functions (CPACF)
DES/TDES Enablement – enables clear key DES and TDES instructions
on all CPs. AES 128-bit, AES 192-bit and AES 256-bit support is
also available.
- Feature code 0864, Crypto Express3 Feature – optional,
and only available if you have feature 3863, CPACF DES/TDES Enablement
installed. The IBM zEnterprise 196 and IBM zEnterprise 114 can support
a maximum of 8 features. Each feature code has two coprocessors/accelerators.
IBM System z10 Enterprise Class (z10EC) and IBM System
z10 Business Class (z10 BC)
The IBM System z10 Enterprise
Class and IBM System z10 Business Class provide constraint relief
and addresses various customer demands. It has several cryptographic
features.
- CP Assist for Cryptographic Functions is implemented on
every processor. SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512 secure
hashing is directly available to application programs.
- Feature code 3863, CP Assist for Cryptographic Functions (CPACF)
DES/TDES Enablement – enables clear key DES and TDES instructions
on all CPs. AES 128-bit, AES 192-bit and AES 256-bit support is
also available.
- Feature code 0863, Crypto Express2 Feature – optional,
and only available if you have feature 3863, CPACF DES/TDES Enablement
installed. The z10 EC and z10 BC can support a maximum of 8 features.
Each feature code has two coprocessors/accelerators.
- Feature code 0864, Crypto Express3 Feature – optional,
and only available if you have feature 3863, CPACF DES/TDES Enablement
installed. The z10 EC and z10 BC can support a maximum of 8 features.
Each feature code has two coprocessors/accelerators.
IBM System z9 Business Class (z9 BC)
The
IBM System z9 BC provides constraint relief and addresses various
customer demands. It has several cryptographic features.
- CP Assist for Cryptographic Functions is implemented on
every processor. SHA-1, SHA-224 and SHA-256 secure hashing is directly
available to application programs.
- Feature code 3863, CP Assist for Cryptographic Functions (CPACF)
DES/TDES Enablement – enables clear key DES and TDES instructions
on all CPs. In addition, ICSF supports hardware implementation
of AES 128-bit keys and software implementation of AES 192-bit
and AES 256-bit key lengths.
- Feature code 0863, Crypto Express2 Feature – optional,
and only available if you have feature 3863, CPACF DES/TDES Enablement
installed. The IBM System z9 BC can support a maximum of 8 features.
Each feature code has two coprocessors/accelerators.
IBM System z9 Enterprise Class (z9 EC)
The
IBM System z9 EC provides constraint relief and addresses various
customer demands. It has several cryptographic features.
- CP Assist for Cryptographic Functions is implemented on
every processor. SHA-1, SHA-224 and SHA-256 secure hashing is directly
available to application programs.
- Feature code 3863, CP Assist for Cryptographic Functions (CPACF)
DES/TDES Enablement – enables clear key DES and TDES instructions
on all CPs. In addition, ICSF supports hardware implementation
of AES 128-bit keys and software implementation of AES 192-bit
and AES 256-bit key lengths.
- Feature code 0863, Crypto Express2 Feature – optional,
and only available if you have feature 3863, CPACF DES/TDES Enablement
installed. The IBM System z9 EC can support a maximum of 8 features.
Each feature code has two coprocessors/accelerators.
IBM eServer zSeries 990 (z990)
The IBM
eServer zSeries 990 provides constraint relief and addresses various
customer demands. It has several cryptographic features.
- CP Assist for Cryptographic Functions is implemented on
every processor. SHA-1 secure hashing is directly available to application
programs.
- Feature code 3863, CP Assist for Cryptographic Functions (CPACF)
DES/TDES Enablement – enables clear key DES and TDES instructions
on all CPs. In addition, ICSF supports software implementation of
AES.
- Feature code 0862, PCI Cryptographic Accelerator –
optional, and only available if you have feature 3863, CPACF DES/TDES
Enablement installed. The IBM eServer zSeries 990 can support a maximum
of 12 PCI Cryptographic Accelerators. Each feature code has two coprocessors.
- Feature code 0868, PCI X Cryptographic Coprocessor –
optional, and only available if you have feature 3863, CPACF DES/TDES
Enablement installed. The IBM eServer zSeries 990 can support a maximum
of 4 PCIXCCs. Each feature code has one coprocessor.
- Feature code 0863, Crypto Express2 Coprocessor –
optional, and only available if you have feature 3863, CPACF DES/TDES
Enablement installed. The IBM eServer zSeries 990 can support a maximum
of 16 CEX2Cs. Each feature code has two coprocessors.
Note: You can have a maximum of 6 PCICA features (12 cards),
4 PCIXCC features (4 cards) and 16 CEX2Cs (8 features), with maximum
number of 8 installed features.
IBM eServer zSeries 890 (z890)
The IBM
eServer zSeries 890 provides constraint relief and addresses various
customer demands. It has several cryptographic features.
- CP Assist for Cryptographic Functions are implemented on
every processor. SHA-1 secure hashing is directly available to application
programs.
- Feature code 3863, CP Assist for Cryptographic Functions (CPACF)
DES/TDES Enablement – enables clear key DES and TDES instructions
on all CPs. In addition, ICSF supports software implementation of
AES.
- Feature code 0862, PCI Cryptographic Accelerator –
optional, and only available if you have feature 3863, CPACF DES/TDES
Enablement installed. The IBM eServer zSeries 890 can support a maximum
of 12 PCI Cryptographic Accelerators. Each feature code has two coprocessors.
- Feature code 0868, PCI X Cryptographic Coprocessor –
optional, and only available if you have feature 3863, CPACF DES/TDES
Enablement installed. The IBM eServer zSeries 890 can support a maximum
of 4 PCIXCCs. Each feature code has one coprocessor.
- Feature code 0863, Crypto Express2 Coprocessor –
optional, and only available if you have feature 3863, CPACF DES/TDES
Enablement installed. The IBM eServer zSeries 890 can support a maximum
of 16 CEX2Cs. Each feature code has two coprocessors.
Note: You can have a maximum of 6 PCICA features (12 cards),
4 PCIXCC features (4 cards) and 16 CEX2Cs (8 features), with maximum
number of 8 installed features.