Building the EP11 crypto stack

The components of the Linux™ on Z EP11 enablement must be embedded into an infrastructure of hardware and software cryptographic components. In this environment, applications can start the provided functions by using the PKCS #11 openCryptoki API. This infrastructure is referred to as EP11 stack.

To enable the EP11 hardware cryptographic function support on IBM Z® mainframes, you must prepare some hardware components. You must also install and load specific driver modules and libraries, configure and start daemons, and set up your system environment.