CEX5S / 4767 - Library

Product documentation for the IBM 4767 is available in PDF format. To view a PDF document, you need the Adobe® (Adobe Systems Incorporated) Reader®. If you don't have the Reader installed, you can download a complimentary copy from Adobe.

IBM Z mainframe. The 4767 is available as feature code (FC) 0890 (Crypto Express5S, or CEX5S) on IBM Z mainframes (z14, z13s, and z13 only), either on z/OS® or Linux® on z Systems® operating systems.

x64 servers. The 4767 is available as machine type-model 4767-002 on x64 servers on either Microsoft® Windows®, SUSE® Linux Enterprise Server (SLES), or Red Hat® Enterprise Linux® (RHEL) 64-bit operating systems. IBM offers a Common Cryptographic Architecture (CCA) Support Program for the IBM 4767 at no charge to the user.

IBM Power Systems. The 4767 is available as FC EJ32, Customer Card Identification Number 4767 (without blind-swap cassette custom carrier) and as FC EJ33, Customer Card Identification Number 4767 (with blind-swap cassette custom carrier) on IBM POWER8® servers, either on IBM AIX®, IBM i®, or PowerLinux® (RHEL, SLES, or Ubuntu®) operating systems.

These manuals apply to the IBM 4767 PCIe Cryptographic Coprocessor.

IBM 4767 data sheet (PDF, 326 KB)

IBM 4767 PCIe Cryptographic Coprocessor Installation Manual (PDF, 876 KB)

IBM Systems Environmental Notices and User Guide, Z125-5823

IBM Systems Safety Notices, G229-9054

IBM Warranty Information for the 4767-002 and 4765-001 PCle Cryptographic Coprocessors (PDF, 693 KB), SC23-6884

IBM Statement of Limited Warranty, Z125-4753-13

IBM License Agreement for Machine Code (Contains Form Z125-5468-06)

IBM License Agreement for Machine Code Addendum for Cryptography (Contains Form Z125-8449-01)

For Linux on IBM Z, the IBM Secure Key Solution with the Common Cryptographic Architecture Application Programmer's Guide (PDF, 7 MB) describes the capabilities of the security application programming interface (API) provided with the CCA Support Program.

For x64 servers, the CCA manuals describe:

• how to install and use CCA and its tools and utilities,
• the capabilities of the security application programming interface (API) provided with the CCA Support Program, and
• how to use the Crypto Hardware Installation and Maintenance (CHIM) program on the workstation

For x64 installations, these manuals are available on the IBM CCA download site.

Note: To access this site, you must obtain and log in with an IBMid. This process is quick and easy. Instructions are on the download site.

IBM provides documentation that helps developers design, write, and debug applications that take advantage of CCA's capabilities. The following manuals are available on the IBM CCA download site:

• Custom Software Developer's Toolkit Guide describes the tools that enable developers to build applications for the IBM 4767, authenticate programs, and load programs into the IBM 4767.
• Custom Software Interface Reference describes the function calls that applications running in the IBM 4767 use to obtain services from the coprocessor operating system and from the coprocessor device driver in the host system.
• CCA User Defined Extensions Reference and Guide describes the user-defined extensions programming environment within the CCA application in the IBM 4767, the method for extending the CCA host API, and the application programming interface reference for these environments.
• Interactive Code Analysis Tool (ICAT) describes the tool that developers use to debug applications running on the IBM 4767.

Note: To access this site, you must obtain and log in with an IBMid. This process is quick and easy. Instructions are on the download site.

The EP11 manuals, which describe the library structure and capabilities of the cryptographic API provided with the EP11 Library for Linux on Z, as well as other details, are available on the IBM EP11 download site.

Note: To access this site, you must obtain and log in with an IBMid. This process is quick and easy. Instructions are on the download site.

The IBM CPACF Enablement crypto feature

The IBM Central Processor Assist for Cryptographic Functions (CPACF) feature, IBM Z feature code 3863, provides hardware acceleration for 290-960 MB/sec bulk encryption rate, AES (128, 192, 256 bit), DES (DEA, TDEA2, TDEA3), SHA-1 (160 bit), and SHA-2 (224, 256, 384, 512 bit).

The IBM Cryptographic Coprocessor Facility (CCF)

The Cryptographic Coprocessor Facility (CCF) is an optional hardware feature that provides high-performance cryptographic capabilities for z/VM®, including DES, Triple-DES, RSA, and various finance-industry-specific cryptographic services. IBM zSeries servers, except the zSeries 990, offer the CCF feature.