The Cryptographic Coprocessor Feature available on the IBM zSeries 900, provides RSA and DSS digital signature functions, key management functions, and DES key distribution functions.

The IBM zSeries 900 provides the ability to generate RSA keys on the PCI Cryptographic Coprocessor. ICSF provides application programming interfaces to these functions through callable services.

The PCIXCC (available on the z890 and z990), the CEX2C (available on the z9 EC, z9 BC, z10 EC and z10 BC), and the CEX3C (available on the z10 EC and z10 BC) provide RSA digital signature functions, key management functions, and DES key distribution functions, PIN, MAC and data encryption functions, and application programming interfaces to these functions through callable services. You can also generate RSA keys on the PCIXCC/CEX2C/CEX3C.

Specifically, it provides ECDSA digital signature functions, ECC key management functions, and application programming interfaces to these functions through callable services.