Preparing for Installation › Hardware Requirements › Supported Cryptographic Hardware

Supported Cryptographic Hardware

Two cryptographic hardware choices are available for use on various systems:

• Cryptographic Coprocessor Facility (CCF) A standard component on z900 and a no-cost option for z800. On z800 and z900 systems, ICSF requires CCF.
• CP Assist for Cryptographic Functions (CPACF) A standard component on z9 and z10 and a no-cost option for z890 and z990.

Other available cryptographic hardware components do not necessarily improve encryption performance, as described in the following list:

• Peripheral Component Interconnect (PCI)-based coprocessors (PCICC, PCIXCC, and Crypto Express2), which provide secure key storage, hardware hashing, and SSL support.
• PCI-based accelerators (PCICA, Crypto Express2 configured in accelerator mode), which provide high performance SSL assistance.

Note: Because CA Dispatch uses a clear key, it does not require the use of the Cryptographic Express2 coprocessor (CEX2C). To run ICSF without a CEX2C coprocessor, you will need ICFS release FMID HCR7751or higher.

If you are running an older release of ICSF, you will be required to purchase a CEX2C coprocessor because older releases of ICSF required that hardware to initialize the CKDS data set.