IBM System z characteristics
The Crypto Express® features (CEX) must be configured using the IBM® System z® Service Element (SE) or Hardware Management Console (HMC).
In the SE Cryptographic Configuration dialog the CEX adapters can be configured either as Accelerator or as Coprocessor in the Crypto Type Configuration dialog.
The LPAR hosting the IBM WebSphere Application Server (WAS) server must be capable of using the CEX features. The CEX features can be shared among selected LPARs. To enable an LPAR to use a crypto express adapter, the LPAR must be configured to have access to specific crypto adapters. This can be done on the SE or HMC with the customizing image profiles task. The IBM CP Assist for Cryptographic Functions (CPACF) is available to the IBM System z processor units (PU) when the appropriate cryptographic feature code 3863 is installed.
More information about these assignments can be found in this paper:
Exploiting IBM System z cryptographic hardware using JSSE
https://public.dhe.ibm.com/software/dw/linux390/perf/ZSW03153-USEN-01.pdf