IBM z15 and IBM LinuxONE III deliver new feature numbers

IBM Japan Hardware Announcement JG22-0126
July 26, 2022

Table of contents
Planned availability datePlanned availability dateTechnical informationTechnical information
Product numberProduct numberPricesPrices


Top rule

The IBM® zSystems platform continues to expand its security capabilities that businesses require as they digitally transform their enterprises.

Important upgrade information: TKE 10.0 level of LIC

The main purpose of TKE 10.0 is to provide support for managing Crypto Express 8S (CEX8S), which is available only on the IBM z16™. Crypto Express 8S is not available on IBM z15™ or LinuxONE III.

Clients on an IBM zSystems server that does not support Crypto Express 8S may still want to take advantage of moving to TKE 10.0 to prepare for a future processor or pick up new TKE features that are not specific to the Crypto Express 8S.

You can upgrade from the Trusted Key Entry (TKE) 9.x level of the Licensed Internal Code (LIC) to TKE 10.0 with the purchase of a 4770 Crypto Adapter for the TKE. However, you must update your workstation BIOS prior to the upgrade. To do that, you must install TKE 9.2 with the latest patches prior to installing the TKE 10.0 firmware.

The TKE 10.0 level of LIC is required if you want to manage the CEX8S using the TKE. In addition, TKE 10.0 uses quantum-safe cryptography1 when the TKE authenticates CEX8S, derives Transport Keys between the TKE's HSM and the target CEX8S, and during the on-demand HSM dual validation check.

  • TKE 10.0 has a domain group limitation. All the HSMs in a TKE domain group must all contain quantum-safe cryptography support (that is, only include CEX8S), or all the HSMs must not contain quantum-safe cryptography support (that is, the HSMs can't include any CEX8S).
  • TKE 10.0 now supports one-time use MFA authentication on an open host.
  • TKE 10.0 contains Configuration Migration Tasks support to enable you to collect and apply data to and from CEX8S and collect data from a pre-CEX8S HSM and apply it to CEX8S HSMs.
  • TKE 10.0 supports a new default wrapping method for the CEX8S HSMs.
  • TKE 10.0 added support for a new AES DUKPT key attribute when using TKE to create AES DKYGENKY parts.

TKE 10.0 added support for the EP11 Outbound Authentication (OA) Signature Policy. The EP11 firmware on a CEX8S HSM enables users to configure what OA signatures are returned on responses from the HSM. The TKE OA Signature Policy controls what configuration options you may select when managing the settings from the TKE.

1 Quantum-safe cryptography refers to efforts to identify algorithms that are resistant to attacks by both classical and quantum computers, to keep information assets secure even after a large-scale quantum computer has been built. Source:

Back to topBack to top

Planned availability date

Top rule

July 26, 2022

Availability within a country is subject to local legal requirements.

Back to topBack to top

Product number

Top rule

Description Machine type Model Feature number
IBM z15 8561 T01  
IBM z15 Model T02 8562 T02  
4770 Crypto Adapter     0851

Description Machine type Model Feature number
IBM LinuxONE III 8561 LT1  
IBM LinuxONE III 8562 LT2  
4770 Crypto Adapter     0851
TKE Rack Mount     0057
TKE     0058
TKE Tower     0144
TKE Rack     0145
TKE Rack     0233
TKE Tower     0234
TKE 10.0 LIC     0882

Feature conversions

From   To   Description
Model type Feature number Model type Feature number  
8561 0085 8561 0233 TKE Rack
8561 0086 8561 0234 TKE Tower
8561 0087 8561 0145 TKE Rack
8561 0088 8561 0144 TKE Tower
8562 0085 8562 0233 TKE Rack
8562 0086 8562 0234 TKE Tower
8562 0087 8562 0145 TKE Rack
8562 0088 8562 0144 TKE Tower

Back to topBack to top


Top rule

No publications are shipped

To access the IBM Publications Center Portal, go to the IBM Publications Center website.

The Publications Center is a worldwide central repository for IBM product publications and marketing material with a catalog of 70,000 items. Extensive search facilities are provided. A large number of publications are available online in various file formats, which can currently be downloaded.

National language support
Not applicable

Back to topBack to top


Top rule

IBM Systems Lab Services

Systems Lab Services offers infrastructure services to help build hybrid cloud and enterprise IT solutions. From servers to storage systems and software, Systems Lab Services can help deploy the building blocks of a next-generation IT infrastructure to empower a client's business. Systems Lab Services consultants can perform infrastructure services for clients online or onsite, offering deep technical expertise, valuable tools, and successful methodologies. Systems Lab Services is designed to help clients solve business challenges, gain new skills, and apply best practices.

Systems Lab Services offers a wide range of infrastructure services for IBM Power® servers, IBM Storage systems, IBM Z®, and IBM LinuxONE. Systems Lab Services has a global presence and can deploy experienced consultants online or onsite around the world.

For assistance, contact Systems Lab Services at

To learn more, see the IBM Systems Lab Services website.

IBM Consulting™

As transformation continues across every industry, businesses need a single partner to map their enterprise-wide business strategy and technology infrastructure. IBM Consulting is the business partner to help accelerate change across an organization. IBM specialists can help businesses succeed through finding collaborative ways of working that forge connections across people, technologies, and partner ecosystems. IBM Consulting brings together the business expertise and an ecosystem of technologies that help solve some of the biggest problems faced by organizations. With methods that get results faster, an integrated approach that is grounded in an open and flexible hybrid cloud architecture, and incorporating technology from IBM Research® and IBM Watson® AI, IBM Consulting enables businesses to lead change with confidence and deliver continuous improvement across a business and its bottom line.

For additional information, see the IBM Consulting website.

IBM Technology Support Services (TSS)

Get preventive maintenance, onsite and remote support, and gain actionable insights into critical business applications and IT systems. Speed developer innovation with support for over 240 open-source packages. Leverage powerful IBM analytics and AI-enabled tools to enable client teams to manage IT problems before they become emergencies.

TSS offers extensive IT maintenance and support services that cover more than one niche of a client's environment. TSS covers products from IBM and OEMs, including servers, storage, network, appliances, and software, to help clients ensure high availability across their data center and hybrid cloud environment.

For details on available services, see the Technology support for hybrid cloud environments website.

IBM Expert Labs

Expert Labs can help clients accelerate their projects and optimize value by leveraging their deep technical skills and knowledge. With more than 20 years of industry experience, these specialists know how to overcome the biggest challenges to deliver business results that can have an immediate impact.

Expert Labs' deep alignment with IBM product development allows for a strategic advantage as they are often the first in line to get access to new products, features, and early visibility into roadmaps. This connection with the development enables them to deliver First of a Kind implementations to address unique needs or expand a client's business with a flexible approach that works best for their organization.

For additional information, see the IBM Expert Labs website.

IBM Security® Expert Labs

With extensive consultative expertise on IBM Security software solutions, Security Expert Labs helps clients and partners modernize the security of their applications, data, and workforce. With an extensive portfolio of consulting and learning services, Expert Labs provides project-based and premier support service subscriptions.

These services can help clients deploy and integrate IBM Security software, extend their team resources, and help guide and accelerate successful hybrid cloud solutions, including critical strategies such as zero trust. Remote and on-premises software deployment assistance is available for IBM Cloud Pak® for Security, IBM Security QRadar®/QRoC, IBM Security SOAR/Resilient®, IBM i2, IBM Security Verify, IBM Security Guardium®, and IBM Security MaaS360®.

For more information, contact Security Expert Labs at

For additional information, see the IBM Security Expert Labs website.

Back to topBack to top

IBM support

Top rule

For installation and technical support information, see the IBM Support Portal.

Back to topBack to top

Additional support

Top rule

IBM Client Engineering for Systems

Client Engineering for Systems is a framework for accelerating digital transformation. It helps you generate innovative ideas and equips you with the practices, technologies, and expertise to turn those ideas into business value in weeks. When you work with Client Engineering for Systems, you bring pain points into focus. You empower your team to take manageable risks, adopt leading technologies, speed up solution development, and measure the value of everything you do. Client Engineering for Systems has experts and services to address a broad array of use cases, including capabilities for business transformation, hybrid cloud, analytics and AI, infrastructure systems, security, and more. Contact Client Engineering at

Back to topBack to top

Technical information

Top rule

Planning information

Cable orders

Not applicable

Security, auditability, and control

The client is responsible for evaluation, selection, and implementation of security features, administrative procedures, and appropriate controls in application systems and communications facilities.

Back to topBack to top


Top rule

For all local charges, contact your local IBM representative.


z15, IBM z16 and IBM Consulting are trademarks of IBM Corporation in the United States, other countries, or both.

IBM, Power, IBM Z, IBM Research, IBM Watson, IBM Security, IBM Cloud Pak, QRadar, Resilient, Guardium and MaaS360 are registered trademarks of IBM Corporation in the United States, other countries, or both.

Other company, product, and service names may be trademarks or service marks of others.

Terms of use

IBM products and services which are announced and available in your country can be ordered under the applicable standard agreements, terms, conditions, and prices in effect at the time. IBM reserves the right to modify or withdraw this announcement at any time without notice. This announcement is provided for your information only. Additional terms of use are located at

Terms of use

For the most current information regarding IBM products, consult your IBM representative or reseller, or go to the IBM worldwide contacts page

IBM Japan