CEX6S Linux on Z

This page provides information about the IBM cryptographic software packages for IBM Z® servers running Linux® on Z.

With the purchase of an IBM CEX6S / 4768 HSM, you also receive IBM’s Common Cryptographic Architecture (CCA) and IBM's Enterprise PKCS #11 (EP11).

Learn more about CCA
Learn more about EP11

A comparison of the capabilities of CCA and EP11 is provided to help customers choose the product that fits their needs.
CCA and EP11 Comparison



CCA Current Releases

EP11 Current Releases

CCA release 6 for CEX6S and CEX5S, for RHEL, SLES, and Ubuntu

CCA 6 releases, which include RPM and Debian packages, are available for download.

This IBM download site contains the license, installation files, readme, release notes, and sha1sum values. Clicking to download an RPM or Debian package means you accept the terms of the LICENSE file which is included in the directory (and in the package).
Note: To access this site, you need to obtain and login with an IBMid. This process is quick and easy. Instructions are on the download site.

EP11 release 3.0 for CEX7S, CEX6S, and CEX5S

IBM Z EP11 Support Program 3.0.1.1 (2020-02-11)

The IBM Z EP11 Support Program 3.0.1 release, which includes RPM and Debian packages, is available for download.

This IBM download sitehttps://www.ibm.com/marketing/iwm/platform/mrs/assets?source=ibmzep11contains the license, installation files, readme, release notes, and sha1sum values. Clicking to download an RPM or Debian package means you accept the terms of the LICENSE file which is included in the directory (and in the package).
Note: To access this site, you need to obtain and login with an IBMid. This process is quick and easy. Instructions are on the download site.

EP11 release 2.1 for CEX7S, CEX6S and CEX5S

IBM Z EP11 Support Program 2.1.1-0 (2020-02-11)

The IBM Z EP11 Support Program 2.1.1 release, which includes RPM and Debian packages, is available for download.

This IBM download site contains the license, installation files, readme, release notes, and sha1sum values. Clicking to download an RPM or Debian package means you accept the terms of the LICENSE file which is included in the directory (and in the package).
Note: To access this site, you need to obtain and login with an IBMid. This process is quick and easy. Instructions are on the download site.