IBM z15 and IBM LinuxONE III deliver new feature numbers
IBM Canada Hardware Announcement A22-0504July 26, 2022
ENUSA22-0504.PDF| Table of contents | ||||||||||||
|
Overview
The IBM® zSystems platform continues to expand its security capabilities that businesses require as they digitally transform their enterprises.
Important upgrade information: TKE 10.0 level of LIC
The main purpose of TKE 10.0 is to provide support for managing Crypto Express 8S (CEX8S), which is available only on the IBM z16™. Crypto Express 8S is not available on IBM z15™ or LinuxONE III.
Clients on an IBM zSystems server that does not support Crypto Express 8S may still want to take advantage of moving to TKE 10.0 to prepare for a future processor or pick up new TKE features that are not specific to the Crypto Express 8S.
You can upgrade from the Trusted Key Entry (TKE) 9.x level of the Licensed Internal Code (LIC) to TKE 10.0 with the purchase of a 4770 Crypto Adapter for the TKE. However, you must update your workstation BIOS prior to the upgrade. To do that, you must install TKE 9.2 with the latest patches prior to installing the TKE 10.0 firmware.
The TKE 10.0 level of LIC is required if you want to manage the CEX8S using the TKE. In addition, TKE 10.0 uses quantum-safe cryptography1 when the TKE authenticates CEX8S, derives Transport Keys between the TKE's HSM and the target CEX8S, and during the on-demand HSM dual validation check.
- TKE 10.0 has a domain group limitation. All the HSMs in a TKE domain group must all contain quantum-safe cryptography support (that is, only include CEX8S), or all the HSMs must not contain quantum-safe cryptography support (that is, the HSMs can't include any CEX8S).
- TKE 10.0 now supports one-time use MFA authentication on an open host.
- TKE 10.0 contains Configuration Migration Tasks support to enable you to collect and apply data to and from CEX8S and collect data from a pre-CEX8S HSM and apply it to CEX8S HSMs.
- TKE 10.0 supports a new default wrapping method for the CEX8S HSMs.
- TKE 10.0 added support for a new AES DUKPT key attribute when using TKE to create AES DKYGENKY parts.
TKE 10.0 added support for the EP11 Outbound Authentication (OA) Signature Policy. The EP11 firmware on a CEX8S HSM enables users to configure what OA signatures are returned on responses from the HSM. The TKE OA Signature Policy controls what configuration options you may select when managing the settings from the TKE.
1 Quantum-safe cryptography refers to efforts to identify algorithms that are resistant to attacks by both classical and quantum computers, to keep information assets secure even after a large-scale quantum computer has been built. Source: ETSI.org
Back to top
Planned availability date
July 26, 2022
Availability within a country is subject to local legal requirements.
Back to top
Product number
| Description | Machine type | Model | Feature number |
|---|---|---|---|
| IBM z15 | 8561 | T01 | |
| IBM z15 Model T02 | 8562 | T02 | |
| 4770 Crypto Adapter | 0851 |
| Description | Machine type | Model | Feature number |
|---|---|---|---|
| IBM LinuxONE III | 8561 | LT1 | |
| IBM LinuxONE III | 8562 | LT2 | |
| 4770 Crypto Adapter | 0851 | ||
| TKE Rack Mount | 0057 | ||
| TKE | 0058 | ||
| TKE Tower | 0144 | ||
| TKE Rack | 0145 | ||
| TKE Rack | 0233 | ||
| TKE Tower | 0234 | ||
| TKE 10.0 LIC | 0882 |
Feature conversions
| From | To | Description | ||
|---|---|---|---|---|
| Model type | Feature number | Model type | Feature number | |
| 8561 | 0085 | 8561 | 0233 | TKE Rack |
| 8561 | 0086 | 8561 | 0234 | TKE Tower |
| 8561 | 0087 | 8561 | 0145 | TKE Rack |
| 8561 | 0088 | 8561 | 0144 | TKE Tower |
| 8562 | 0085 | 8562 | 0233 | TKE Rack |
| 8562 | 0086 | 8562 | 0234 | TKE Tower |
| 8562 | 0087 | 8562 | 0145 | TKE Rack |
| 8562 | 0088 | 8562 | 0144 | TKE Tower |
Back to top
Publications
No publications are shipped
To access the IBM Publications Center Portal, go to the IBM Publications Center website.
The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalogue of 70,000 items. Extensive search facilities are provided. A large number of publications are available on-line in various file formats, which can currently be downloaded.
National language support
Not applicable
Back to top
Services
IBM Systems Lab Services
Systems Lab Services offers infrastructure services to help build hybrid cloud and enterprise IT solutions. From servers to storage systems and software, Systems Lab Services can help deploy the building blocks of a next-generation IT infrastructure to empower a client's business. Systems Lab Services consultants can perform infrastructure services for clients on-line or onsite, offering deep technical expertise, valuable tools, and successful methodologies. Systems Lab Services is designed to help clients solve business challenges, gain new skills, and apply best practices.
Systems Lab Services offers a wide range of infrastructure services for IBM Power® servers, IBM Storage systems, IBM Z®, and IBM LinuxONE. Systems Lab Services has a global presence and can deploy experienced consultants on-line or onsite around the world.
For assistance, contact Systems Lab Services at ibmsls@us.ibm.com.
To learn more, see the IBM Systems Lab Services website.
IBM Consulting™
As transformation continues across every industry, businesses need a single partner to map their enterprise-wide business strategy and technology infrastructure. IBM Consulting is the business partner to help accelerate change across an organization. IBM specialists can help businesses succeed through finding collaborative ways of working that forge connections across people, technologies, and partner ecosystems. IBM Consulting brings together the business expertise and an ecosystem of technologies that help solve some of the biggest problems faced by organizations. With methods that get results faster, an integrated approach that is grounded in an open and flexible hybrid cloud architecture, and incorporating technology from IBM Research® and IBM Watson® AI, IBM Consulting enables businesses to lead change with confidence and deliver continuous improvement across a business and its bottom line.
For additional information, see the IBM Consulting website.
IBM Technology Support Services (TSS)
Get preventive maintenance, onsite and remote support, and gain actionable insights into critical business applications and IT systems. Speed developer innovation with support for over 240 open-source packages. Leverage powerful IBM analytics and AI-enabled tools to enable client teams to manage IT problems before they become emergencies.
TSS offers extensive IT maintenance and support services that cover more than one niche of a client's environment. TSS covers products from IBM and OEMs, including servers, storage, network, appliances, and software, to help clients ensure high availability across their data centre and hybrid cloud environment.
For details on available services, see the Technology support for hybrid cloud environments website.
IBM Expert Labs
Expert Labs can help clients accelerate their projects and optimize value by leveraging their deep technical skills and knowledge. With more than 20 years of industry experience, these specialists know how to overcome the biggest challenges to deliver business results that can have an immediate impact.
Expert Labs' deep alignment with IBM product development allows for a strategic advantage as they are often the first in line to get access to new products, features, and early visibility into roadmaps. This connection with the development enables them to deliver First of a Kind implementations to address unique needs or expand a client's business with a flexible approach that works best for their organization.
For additional information, see the IBM Expert Labs website.
IBM Security® Expert Labs
With extensive consultative expertise on IBM Security software solutions, Security Expert Labs helps clients and partners modernize the security of their applications, data, and workforce. With an extensive portfolio of consulting and learning services, Expert Labs provides project-based and premier support service subscriptions.
These services can help clients deploy and integrate IBM Security software, extend their team resources, and help guide and accelerate successful hybrid cloud solutions, including critical strategies such as zero trust. Remote and on-premises software deployment assistance is available for IBM Cloud Pak® for Security, IBM Security QRadar®/QRoC, IBM Security SOAR/Resilient®, IBM i2, IBM Security Verify, IBM Security Guardium®, and IBM Security MaaS360®.
For more information, contact Security Expert Labs at sel@us.ibm.com.
For additional information, see the IBM Security Expert Labs website.
Back to top
IBM support
For installation and technical support information, see the IBM Support Portal.
Back to top
Additional support
IBM Client Engineering for Systems
Client Engineering for Systems is a framework for accelerating digital transformation. It helps you generate innovative ideas and equips you with the practices, technologies, and expertise to turn those ideas into business value in weeks. When you work with Client Engineering for Systems, you bring pain points into focus. You empower your team to take manageable risks, adopt leading technologies, speed up solution development, and measure the value of everything you do. Client Engineering for Systems has experts and services to address a broad array of use cases, including capabilities for business transformation, hybrid cloud, analytics and AI, infrastructure systems, security, and more. Contact Client Engineering at sysgarage@ibm.com.
Back to top
Technical information
Planning information
Cable orders
Not applicable
Program services
IBM Support information can be found on the Software Support Handbook website.
Security, auditability, and control
The client is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communications facilities.
Back to top
Regional availability
Anguilla, Antigua and Barbuda, Aruba, Bahamas, Barbados, Bermuda, Sint Eustatius and Saba Bonaire, Canada, Cayman Islands, Curacao, Dominica, Grenada, Guyana, Jamaica, Montserrat, Saint Kitts and Nevis, Saint Lucia, Saint Vincent and the Grenadines, Sint Maarten, Suriname, Trinidad and Tobago, Turks and Caicos Islands, and British Virgin Islands
Trade-marks
z15, IBM z16 and IBM Consulting are trade-marks of IBM Corporation in the United States, other countries, or both.
IBM, Power, IBM Z, IBM Research, IBM Watson, IBM Security, IBM Cloud Pak, QRadar, Resilient, Guardium and MaaS360 are registered trade-marks of IBM Corporation in the United States, other countries, or both.
Other company, product, and service names may be trade-marks or service marks of others.
tm Trade-mark owned by International Business Machines Corporation and is used under license by IBM Canada Ltd.
® Registered trade-mark of International Business Machines Corporation and is used under license by IBM Canada Ltd.
(**) Company, product or service name may be a trade-mark or service mark of others.
Terms of use
IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Additional terms of use are located at
For the most current information regarding IBM products, consult your IBM representative or reseller, or go to the IBM worldwide contacts page