IBM z13s User Manual

288 IBM z13s Technical Guide
HCR77A1 V2R1
V1R13
V1R12
Cryptographic Support for
z/OS V1R13-V2R1
򐂰 AP Configuration Simplification
򐂰 KDS Key Utilization Statistics
򐂰 Dynamic SSM
򐂰 UDX Reduction and Simplification
򐂰 Europay-Mastercard-Visa (EMV)
Enhancements
򐂰 Key wrapping and other security
enhancements
򐂰 OWH/RNG Authorization Access
򐂰 SAF ACEE Selection
򐂰 Non-SAF Protected IQF
򐂰 RKX Key Export Wrapping
򐂰 AES MAC Enhancements
򐂰 PKCS #11 Enhancements
򐂰 Improved CTRACE Support
HCR77B0 V2R2
V2R1
V1R13
Cryptographic Support for
z/OS V1R13-z/OS V2R1
Included as a base
element of z/OS V2R2
򐂰 z13 / z13s & CEX5 support, including
support for sharing cryptographic
coprocessors across a maximum of 85 (for
z13) / 40 (for z13s servers) domains
򐂰 VISA Format Preserving Encryption
(VFPE) services
򐂰 DK AES PIN and AES MAC Generate and
Verify Services
򐂰 Support for exploitation of counter mode
(CTR) for AES-based encryption on z196
and later processors
򐂰 Enhanced random number generation
exploiting CPACF Deterministic Random
Number Generate (DRNG) instruction with
ability to disable RNG Cache
򐂰 Services and support for key archiving and
key material validity;
򐂰 Enhancement to the ICSF Multi-Purpose
service, CSFMPS, for change master key
operation dry run
HCR77B1 V2R2
V2R1
V1R13
Cryptographic Support for
z/OS V1R13 - z/OS V2R2
򐂰 ICSF Console command support
򐂰 Support for EMV Simplification services
򐂰 Support for RSAES-OAEP formatting in
PKA Decrypt and Encrypt services,
Support in Key Generate for CIPHER,
DATAC, and DATAM keys in OP, IM, or EX
form
򐂰 Operational Key Load support for HMAC
keys loaded from the TKE
򐂰 Additional DK AES PIN support
a. Service is required.
ICSF
FMID
z/OS Web deliverable name Supported function

IBM z13s Specifications

General

Brand	IBM
Model	z13s
Category	Server
Language	English