Setting up the cryptographic device driver

Edit online

Ubuntu 22.04 LTS LPAR mode z/VM guest KVM guest

Configure the cryptographic device driver through the ap.domain= and the ap.poll_thread= kernel parameters. You might also have to set up libraries and create a device node.

The cryptographic device driver consists of multiple, separate modules:
zcrypt
Cryptographic Coprocessor interface, Cryptographic Coprocessor message type 6, Cryptographic Coprocessor message type 50. Support for message type 6 includes secure key and RNG requests. Support for message type 50 includes RSA requests for both modulus-exponent and Chinese-Remainder Theorem variants.
zcrypt_cex4
device driver for CEX7S, CEX6S, CEX5S, and CEX4S adapters.
zcrypt_cex2a
device driver for CEX3A adapters.

For information about setting up cryptographic hardware on your mainframe system, see zSeries® Crypto Guide Update, SG24-6870.