beautypg.com

IBM 990 User Manual

Page 142

background image

130

IBM

^

zSeries 990 Technical Guide

features on behalf of OS/390 V2.10, z/OS V1.3, z/OS V1.4, and z/OS V1.5, and in addition
supports the following functions:

Double length Derived Unique Key Per Translation (DUKPT) on PCIXCC

EMV 2000 Standard on PCIXCC

Public Key Decrypt (PKD) enhancements on PCICA and PCIXCC

Public Key Encrypt (PKE) enhancements on PCICA and PCIXCC

The Web deliverable is found at:

http://www.ibm.com/eserver/zseries/zos/downloads

The CP Assist for Cryptographic Function (CPACF), PCIX Cryptographic Coprocessor
(PCIXCC), and PCI Cryptographic Accelerator (PCICA) features have specific software
requirements.

The Integrated Cryptographic Service Facility (ICSF) is the support program for the
cryptographic features CPCPACF, PCIXCC, and PCICA. ICSF is integrated into z/OS.

The minimum cryptographic software requirements are:

CP Assist for Cryptographic Function (CPACF):

– OS/390 V2.10 or z/OS V1.2 and later with z990 Cryptographic Support, or z990 and

z890 Enhancements to Cryptographic Support.

– z/VM 3.1 and V4.3 and later.

– Linux distributions with the most recent cryptographic libraries, found at:

http://www-124.ibm.com/developerworks/projects/libica

PCI Cryptographic Accelerator (PCICA)

– OS/390 V2.10 or z/OS V1.2 and later with z990 Cryptographic Support, or z990 and

z890 Enhancements to Cryptographic Support.

– z/VM V5.1 for z/OS and Linux guests.

– z/VMV4.3 and later for Linux guests.

– Linux for zSeries: Red Hat RHEL 3.0 with Cryptographic modules, SUSE SLES 7,

Turbolinux TLES8, and Conectiva CLEE.

PCIX Cryptographic Coprocessor

– OS/390 V2.10 or z/OS V1.2 and later with z990 Cryptographic Support, or z990 and

z890 Enhancements to Cryptographic Support.

– z/VM V5.1 for z/OS and Linux guests.

Including dedicated queue support for secure key and clear key cryptographic
functions for z/OS guests

Including shared queue and dedicated queue support for clear key cryptographic
functions for Linux guests

– Linux on zSeries support is delivered as an Open Source contribution. See:

http://www10.software.ibm.com/developerworks/opensource/linux390/index.shtml

PCIX Cryptographic Coprocessor User-Defined Extensions (UDX)

– OS/390 V2.10 or z/OS V1.2 and later with z990 Cryptographic Support, or z990 and

z890 Enhancements to Cryptographic Support. Table 5-2 on page 126 summarizes the
software support requirements by operating system.