Last Updated: 21 September 2026

Code Signing Certificates for z/VM

With the addition of Host Secure Boot in z/VM Version 7 Release 5.0, public certificates are required to be installed at the HMC/SE in order to facilitate verification of signed modules from IBM. At this time, only SALIPL.MODULE is signed by IBM; more will appear over time.

To validate, use the following certificate:

• IBM Official Code Signing Certificate for zVM.pem.cer

Information regarding the procedures around host secure boot and measured launch will be added to this page before the end of September 2026.