Preparing for Installation › Hardware Requirements › Supported Cryptographic Hardware

Supported Cryptographic Hardware

Two cryptographic hardware choices are available for you to use on various systems:

• Cryptographic Coprocessor Facility (CCF)

  A standard component on z900 and a no-cost option for z800. On z800 and z900 systems, ICSF requires CCF.

• CP Assist for Cryptographic Functions (CPACF)

  A standard component on z9 and z10 and a no-cost option for z890 and z990.

Other available cryptographic hardware components, described in the following list, do not necessarily improve encryption performance:

• Peripheral Component Interconnect (PCI)-based coprocessors (PCICC, PCIXCC, and Crypto Express2)

  These coprocessors provide secure key storage, hardware hashing, and SSL support.

• PCI-based accelerators (PCICA, Crypto Express2 configured in accelerator mode)

  These accelerators provide high performance SSL assistance.

Note:

• Because CA View uses a clear key, it does not require the use of the Cryptographic Express2 coprocessor (CEX2C).
• To run ICSF without a CEX2C coprocessor, you will need ICFS release FMID HCR7751 or higher.
• If you are running an older release of ICSF, you must purchase a CEX2C coprocessor because older releases of ICSF required that specific hardware to initialize the CKDS data set.