Using CA Tape Encryption in Your z/OS Environment › Cryptographic Hardware › How Cryptographic Hardware Works with Tape Encryption

How Cryptographic Hardware Works with Tape Encryption

CA Tape Encryption takes advantage of cryptographic hardware as follows:

• If cryptographic hardware is present, you can use the ICSF CKDS instead of the BES database to store your symmetric encryption keys.
• CA Tape Encryption supports any cryptographic hardware that is available on zSeries machines for RSA encryption and decryption. This includes, but is not limited to the following:
  • The z9 Crypto Express2 Coprocessor
  • All cryptographic hardware supported for the z800, z900, z890, and z990 series
• The IBM CPACF feature available on z890, z990, and z9 processors is exploited by CA Tape Encryption to perform hardware-based one-way hashing and cryptography on supported algorithms.