Building a kernel with the protected key device driver

7.1 LPAR mode z/VM guest KVM guest

Select the CONFIG_PKEY kernel configuration option to build a kernel with the protected key device driver.

Kernel builders: This information is intended for those who want to build their own kernel. Be aware that both compiling your own kernel or recompiling an existing distribution usually means that you have to maintain your kernel yourself.

Figure 1. Kernel configuration menu option for the protected key device driver

Hardware crypto devices --->               (common code option CONFIG_CRYPTO_HW)
       ...
       Support for s390 cryptographic adapters                (CONFIG_ZCRYPT)  
        ...   
       └─ Kernel API for protected key handling               (CONFIG_PKEY)

You can compile the protected key device driver into the kernel or as a separate module, pkey.