6947ch05.fm Draft Document for Review April 7, 2004 6:15 pm
130 IBM eServer zSeries 990 Technical Guide
Double length Derived Unique Key Per Translation (DUKPT), on PCIXCC
EMV 2000 Standard on PCIXCC
Public Key Decrypt (PKD) enhancements on PCICA, and PCIXCC
Public Key Encrypt (PKE) enhancements on PCICA, and PCIXCC
The Web deliverable is found on URL:
http://www.ibm.com/eserver/zseries/zos/downloads
The CP Assist for Cryptographic Function (CPACF), PCIX Cryptographic Coprocessor
(PCIXCC), and PCI Cryptographic Accelerator (PCICA) features have specific software
requirements.
The Integrated Cryptographic Service Facility (ICSF) is the support program for the
cryptographic features: CPCPACF, PCIXCC and PCICA. ICSF is integrated into z/OS.
The minimum cryptographic software requirements are:
CP Assist for Cryptographic Function (CPACF) requires: 990:
– OS/390 V2.10 or z/OS V1.2 and later with z990 Cryptographic Support, or z990 and
z890 Enhancements to Cryptographic Support.
– z/VM 3.1, and V4.3 and later.
– Linux distributions with most recent cryptographic libraries found at:
http://www-124.ibm.com/developerworks/projects/libica
and
http://www-124.ibm.com/developerworks/projects/openCrptoki
PCI Cryptographic Accelerator (PCICA)
– OS/390 V2.10 or z/OS V1.2 and later with z990 Cryptographic Support, or z990 and
z890 Enhancements to Cryptographic Support.
– z/VM V5.1 for z/OS and Linux guests.
– z/VMV4.3 and later for Linux guests
– Linux for zSeries; Red Hat RHEL 3.0 with Cryptographic modules, SUSE SLES 7,
Turbolinux TLES8, and Conectiva CLEE.
PCIX Cryptographic Coprocessor
– OS/390 V2.10 or z/OS V1.2 and later with z990 Cryptographic Support, or z990 and
z890 Enhancements to Cryptographic Support.
– z/VM V5.1 for z/OS and Linux guests.
• Including dedicated queue support for secure key and clear key cryptographic
functions for z/OS guests.
• Including shared queue and dedicated queue support for clear key cryptographic
functions for Linux guests
– Linux on zSeries support is delivered as an Open Source contribution. See URL:
•
http://www10.software.ibm.com/developerwork/opensource/linux390
PCIX Cryptographic Coprocessor User-Defined Extensions (UDX)
– OS/390 V2.10 or z/OS V1.2 and later with z990 Cryptographic Support, or z990 and
z890 Enhancements to Cryptographic Support.Table 5-2 summarizes the software
support requirements by operating system.
