Customization › Data Encryption › Encryption Keys › Supported Cryptographic Hardware

Supported Cryptographic Hardware

Two cryptographic hardware choices are available for use on various systems:

• Cryptographic Coprocessor Facility (CCF) - A standard component on z900 and a no-cost option for z800. On z800 and z900 systems, ICSF requires CCF.
• CP Assist for Cryptographic Functions (CPACF) - A standard component on z9, z10, and z196 and a no-cost option for z890 and z990

Other available cryptographic hardware components do not necessarily improve encryption performance, as described in the following list:

• Peripheral Component Interconnect (PCI)-based coprocessors (PCICC, PCIXCC, and Crypto Express2), which provide secure key storage, hardware hashing, and SSL support.
• PCI-based accelerators (PCICA, Crypto Express2 configured in accelerator mode), which provide high performance SSL assistance.

Note: Because CA Spool uses a clear key, it does not require the use of the Cryptographic Express2 coprocessor (CEX2C). To run ICSF without a CEX2C coprocessor, you need ICFS release FMID HCR7751 or higher.

If you are running an older release of ICSF, you must purchase a CEX2C co-processor because older releases of ICSF required that hardware to initialize the CKDS data set.