Setting up the cryptographic device driver

Red Hat Enterprise Linux 9.2 LPAR mode z/VM guest KVM guest

Configure the cryptographic device driver through the ap.domain= and the ap.poll_thread= kernel parameters. You might also have to set up libraries.

The cryptographic device driver consists of multiple, separate modules:

zcrypt: Cryptographic Coprocessor interface, Cryptographic Coprocessor message type 6, Cryptographic Coprocessor message type 50. Support for message type 6 includes secure key and RNG requests. Support for message type 50 includes RSA requests for both modulus-exponent and Chinese-Remainder Theorem variants.
zcrypt_cex4: device driver for CEX7S, CEX6S, and CEX5S adapters.

For information about setting up cryptographic hardware on your mainframe, see zSeries Crypto Guide Update, SG24-6870.