System Requirements

The system requirements for IBM Digital Asset Haven with Governance Engine server ensure optimal performance and security during deployment. The configuration specifies resources such as logical partitions (LPARs), memory and, storage. The requirements for the HSM Signer and the Governance Engine server LPAR are the same.

Hardware requirements

Supported hardware
The following hardware platforms are supported:
  • IBM z17, all models
  • IBM z16, all models
  • IBM LinuxONE Emperor 5
  • IBM LinuxONE Emperor 4
Hardware requirements for the Kernel-based Virtual Machine (KVM) host
Feature Code 115, Secure Execution for Linux, is required on IBM Z or IBM LinuxONE hardware.

HSM Signer and Governance Engine server require the following Red Hat Virtualization Solution foundation:

  • Red Hat Enterprise Linux 9.7 or later, with an active subscription. The KVM hypervisor must be installed, and IBM Secure Execution for Linux must be enabled for the LPAR.
The KVM host must run in an LPAR with the following minimum configuration:
  • 4 general central processors (GCPs) or 2 IBM Integrated Facility for Linux (IFL) processors
  • 48 GB of memory
  • 198 GB of storage
Hardware requirements for the KVM guest (Governance Engine server)
The KVM guest running the Governance Engine server requires the following minimum resources:
  • 8 GB of memory
  • 10 GB of disk storage

The KVM host must support secure execution. Before configuring IBM Secure Execution, review the prerequisites described in What you should know. For instructions on setting up the KVM host, see Cloud provider tasks.The currently supported operating system versions for a KVM host that runs secure execution guests are listed here.

IBM Confidential Computing Container Runtime (CCRT), formerly known as Hyper Protect Virtual Servers, version 2.2.3.2 or later is required. For instructions on downloading and configuring the runtime, see Downloading the IBM Confidential Computing Container Runtime bundle.