Defining System Options in Parmlib › Sample Parmlib Members › Symmetric Key Options › Cryptographic Hardware Supported

Cryptographic Hardware Supported

For optimal performance, install or enable CCF or CPACF. On systems where CCF is installed ICSF is also required. Review the ICSF install requirements for your system and the ICSF options you intend to implement.

Two cryptographic hardware options are available for use on various systems:

Cryptographic Coprocessor Facility (CCF)

A standard component on z900 and a no-cost option for z800. On z800 and z900 systems, ICSF requires CCF.

CP Assist for Cryptographic Functions (CPACF)

A standard component on z9, z10, and z11 and a no-cost option for z890 and z990.

Other available cryptographic hardware components do not necessarily improve encryption performance, as described in the following list:

• Peripheral Component Interconnect (PCI)-based coprocessors (PCICC, PCIXCC, and Crypto Express2), which provide secure key storage, hardware hashing, and SSL support.
• PCI-based accelerators (PCICA, Crypto Express2 configured in accelerator mode), which provide high performance SSL assistance.

Support for the IBM TS1120 and TS1130 encryption capable drives is also provided when the CA Encryption Key Manager is licensed.