Hardware and software prerequisites

6.10 LPAR mode z/VM guest KVM guest

Support for Crypto Express features depends on the IBM Z® or IBM® LinuxONE hardware model.

Table 1 lists the support for the cryptographic adapters.
Table 1. Support for cryptographic adapters by hardware model
Cryptographic adapters Hardware support
CEX8A, CEX8C, and CEX8P IBM z16™
CEX7A, CEX7C, and CEX7P IBM z16, z15® and IBM LinuxONE III
CEX6A, CEX6C, and CEX6P IBM z16, z15, z14, z14 ZR1, IBM LinuxONE III, and IBM LinuxONE II
CEX5A, CEX5C, and CEX5P z15, z14, z13®, z13s®, IBM LinuxONE III, IBM LinuxONE II, and IBM LinuxONE
CEX4A, CEX4C, and CEX4P zEC12 and zBC12

Crypto Express8S adapters can handle larger request and reply sizes than earlier cryptographic adapters. The software that manages Crypto Express8S adapters must support these larger request and reply sizes.

Table 2 lists the required software by function.
Table 2. Required software
Software required Function that is supported by the software
The CCA library For the secure key cryptographic functions on CCA coprocessors.

For information about cryptographic CCA coprocessors, coexistence of adapter versions, and how to use CCA functions, see Secure Key Solution with the Common Cryptographic Architecture Application Programmer's Guide, SC33-8294. You can obtain this publication at https://www.ibm.com/docs/linuxonibm/liaaf/lnz_r_ccacnt.html.

The EP11 library For the secure key cryptographic functions on EP11 coprocessors. See Exploiting Enterprise PKCS #11 using openCryptoki, SC34-2713. You can obtain this publication at ibm.com/docs/en/linux-on-systems?topic=overview-exploiting-enterprise-pkcs-11-using-opencryptoki.
The libica library For the clear key cryptographic functions. See libica Programmer's Reference, SC34-2602. You can obtain this publication at ibm.com/docs/en/linux-on-systems?topic=overview-libica-programmers-reference.
APAR VM65942

To support z14 and z14 ZR1 hardware and the CEX6S adapter for Linux® on z/VM®.

APARs VM66428 and VM66206 To support z15 hardware and the CEX7S adapter for Linux on z/VM.