Server hardware

This topic describes the servers on which the cryptographic hardware features are available.

IBM z13

The IBM z13 provides constraint relief and addresses various customer demands. It has several cryptographic features.
  • CP Assist for Cryptographic Functions is implemented on every processor. SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512 secure hashing is directly available to application programs.
  • Feature code 3863, CP Assist for Cryptographic Functions (CPACF) DES/TDES Enablement - enables clear key DES and TDES instructions on all CPs. AES 128-bit, AES 192-bit and AES 256-bit support is also available.
  • Feature code 0890, Crypto Express5 Feature - optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM z13 can support a maximum of 16 features. Each feature code has one hardware feature which can be configured as a CCA coprocessor, a PKCS #11 coprocessor, or an accelerator.

IBM zEnterprise EC12 (zEC12)

The IBM zEnterprise EC12 provides constraint relief and addresses various customer demands. It has several cryptographic features.
  • CP Assist for Cryptographic Functions is implemented on every processor. SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512 secure hashing is directly available to application programs.
  • Feature code 3863, CP Assist for Cryptographic Functions (CPACF) DES/TDES Enablement - enables clear key DES and TDES instructions on all CPs. AES 128-bit, AES 192-bit and AES 256-bit support is also available.
  • Feature code 0864, Crypto Express3 Feature - optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM zEnterprise EC12 can support a maximum of 8 features. Each feature code has two coprocessors/accelerators.
  • Feature code 0865, Crypto Express4 Feature - optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM zEnterprise EC12 can support a maximum of 16 features. Each feature code has one hardware feature which can be configured as a CCA coprocessor, a PKCS #11 coprocessor, or an accelerator.

IBM zEnterprise BC12 (zBC12)

The IBM zEnterprise BC12 provides constraint relief and addresses various customer demands. It has several cryptographic features.
  • CP Assist for Cryptographic Functions is implemented on every processor. SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512 secure hashing is directly available to application programs.
  • Feature code 3863, CP Assist for Cryptographic Functions (CPACF) DES/TDES Enablement - enables clear key DES and TDES instructions on all CPs. AES 128-bit, AES 192-bit and AES 256-bit support is also available.
  • Feature code 0864, Crypto Express3 Feature - optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM zEnterprise BC12 can support a maximum of 8 features. Each feature code has two coprocessors/accelerators.
  • Feature code 0865, Crypto Express4 Feature - optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM zEnterprise BC12 can support a maximum of 16 features. Each feature code has one hardware feature which can be configured as a CCA coprocessor, a PKCS #11 coprocessor, or an accelerator.

IBM zEnterprise 196 (z196) and IBM zEnterprise 114 (z114)

The IBM zEnterprise 196 provides constraint relief and addresses various customer demands. It has several cryptographic features.
  • CP Assist for Cryptographic Functions is implemented on every processor. SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512 secure hashing is directly available to application programs.
  • Feature code 3863, CP Assist for Cryptographic Functions (CPACF) DES/TDES Enablement – enables clear key DES and TDES instructions on all CPs. AES 128-bit, AES 192-bit and AES 256-bit support is also available.
  • Feature code 0864, Crypto Express3 Feature – optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM zEnterprise 196 and IBM zEnterprise 114 can support a maximum of 8 features. Each feature code has two coprocessors/accelerators.

IBM System z10 Enterprise Class (z10EC) and IBM System z10 Business Class (z10 BC)

The IBM System z10 Enterprise Class and IBM System z10 Business Class provide constraint relief and addresses various customer demands. It has several cryptographic features.

  • CP Assist for Cryptographic Functions is implemented on every processor. SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512 secure hashing is directly available to application programs.
  • Feature code 3863, CP Assist for Cryptographic Functions (CPACF) DES/TDES Enablement – enables clear key DES and TDES instructions on all CPs. AES 128-bit, AES 192-bit and AES 256-bit support is also available.
  • Feature code 0863, Crypto Express2 Feature – optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The z10 EC and z10 BC can support a maximum of 8 features. Each feature code has two coprocessors/accelerators.
  • Feature code 0864, Crypto Express3 Feature – optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The z10 EC and z10 BC can support a maximum of 8 features. Each feature code has two coprocessors/accelerators.

IBM System z9 Business Class (z9 BC)

The IBM System z9 BC provides constraint relief and addresses various customer demands. It has several cryptographic features.

  • CP Assist for Cryptographic Functions is implemented on every processor. SHA-1, SHA-224 and SHA-256 secure hashing is directly available to application programs.
  • Feature code 3863, CP Assist for Cryptographic Functions (CPACF) DES/TDES Enablement – enables clear key DES and TDES instructions on all CPs. In addition, ICSF supports hardware implementation of AES 128-bit keys and software implementation of AES 192-bit and AES 256-bit key lengths.
  • Feature code 0863, Crypto Express2 Feature – optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM System z9 BC can support a maximum of 8 features. Each feature code has two coprocessors/accelerators.

IBM System z9 Enterprise Class (z9 EC)

The IBM System z9 EC provides constraint relief and addresses various customer demands. It has several cryptographic features.

  • CP Assist for Cryptographic Functions is implemented on every processor. SHA-1, SHA-224 and SHA-256 secure hashing is directly available to application programs.
  • Feature code 3863, CP Assist for Cryptographic Functions (CPACF) DES/TDES Enablement – enables clear key DES and TDES instructions on all CPs. In addition, ICSF supports hardware implementation of AES 128-bit keys and software implementation of AES 192-bit and AES 256-bit key lengths.
  • Feature code 0863, Crypto Express2 Feature – optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM System z9 EC can support a maximum of 8 features. Each feature code has two coprocessors/accelerators.

IBM eServer zSeries 990 (z990)

The IBM eServer zSeries 990 provides constraint relief and addresses various customer demands. It has several cryptographic features.

  • CP Assist for Cryptographic Functions is implemented on every processor. SHA-1 secure hashing is directly available to application programs.
  • Feature code 3863, CP Assist for Cryptographic Functions (CPACF) DES/TDES Enablement – enables clear key DES and TDES instructions on all CPs. In addition, ICSF supports software implementation of AES.
  • Feature code 0862, PCI Cryptographic Accelerator – optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM eServer zSeries 990 can support a maximum of 12 PCI Cryptographic Accelerators. Each feature code has two coprocessors.
  • Feature code 0868, PCI X Cryptographic Coprocessor – optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM eServer zSeries 990 can support a maximum of 4 PCIXCCs. Each feature code has one coprocessor.
  • Feature code 0863, Crypto Express2 Coprocessor – optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM eServer zSeries 990 can support a maximum of 16 CEX2Cs. Each feature code has two coprocessors.
Note: You can have a maximum of 6 PCICA features (12 cards), 4 PCIXCC features (4 cards) and 16 CEX2Cs (8 features), with maximum number of 8 installed features.

IBM eServer zSeries 890 (z890)

The IBM eServer zSeries 890 provides constraint relief and addresses various customer demands. It has several cryptographic features.

  • CP Assist for Cryptographic Functions are implemented on every processor. SHA-1 secure hashing is directly available to application programs.
  • Feature code 3863, CP Assist for Cryptographic Functions (CPACF) DES/TDES Enablement – enables clear key DES and TDES instructions on all CPs. In addition, ICSF supports software implementation of AES.
  • Feature code 0862, PCI Cryptographic Accelerator – optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM eServer zSeries 890 can support a maximum of 12 PCI Cryptographic Accelerators. Each feature code has two coprocessors.
  • Feature code 0868, PCI X Cryptographic Coprocessor – optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM eServer zSeries 890 can support a maximum of 4 PCIXCCs. Each feature code has one coprocessor.
  • Feature code 0863, Crypto Express2 Coprocessor – optional, and only available if you have feature 3863, CPACF DES/TDES Enablement installed. The IBM eServer zSeries 890 can support a maximum of 16 CEX2Cs. Each feature code has two coprocessors.
Note: You can have a maximum of 6 PCICA features (12 cards), 4 PCIXCC features (4 cards) and 16 CEX2Cs (8 features), with maximum number of 8 installed features.