z/OS Cryptographic Services ICSF Administrator's Guide
Previous topic | Next topic | Contents | Index | Contact z/OS | Library | PDF


Managing Master Keys - CCF and PCICC

z/OS Cryptographic Services ICSF Administrator's Guide
SA22-7521-17

This topic describes how to use the master key entry panels to enter master keys in the Cryptographic Coprocessor Feature and PCI Cryptographic Coprocessor.

You can have up to two Cryptographic Coprocessor Features on each IBM eServer zSeries 900. Each Cryptographic Coprocessor Feature is capable of performing cryptographic functions and holding the master keys within a secure boundary.

You can have multiple PCI Cryptographic Coprocessors and PCI Cryptographic Accelerators on these servers. There can be a total of 16.

Each PCI Cryptographic Coprocessor is capable of performing cryptographic functions and holding the master keys within a secure boundary. The PCI Cryptographic Coprocessors work in conjunction with the Cryptographic Coprocessor Features on your server.

Restriction: The CCF and PCICC are only available on the IBM eServer zSeries 900 processors.

Requests for cryptographic services are routed to either the PCICC or CCF, depending on key types specified in the request. In order for these two types of cryptographic coprocessors to work together, you need to install the same master key values for each coprocessor.

Note:
The PCI Cryptographic Accelerators improve private key decryption performance. They do not require setting of master keys.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014