GLYPH<SM590000> Europay, MasterCard, and Visa (EMV) card transaction processing GLYPH<SM590000> Card personalization GLYPH<SM590000> Other financial transaction processing GLYPH<SM590000> Integrated role-based access control system GLYPH<SM590000> Greater than 16 domains support up to 85 LPARs on z14 servers GLYPH<SM590000> Payment Card Industry (PCI) PIN Transaction Security (PTS) HSM Certification exclusive  to CEX6S and z14 GLYPH<SM590000> Visa Format Preserving Encryption (VFPE) support, introduced to z13 or z13s servers GLYPH<SM590000> AES PIN support for the German banking industry GLYPH<SM590000> PKA Translate UDX function into CCA GLYPH<SM590000> Verb Algorithm Currency Greater than 16 domains support User-defined extensions support User-defined extension (UDX) allows a developer to add customized operations to IBM’s CCA  Support Program. UDXs to the CCA support customized operations that run within the Crypto  Express features when defined as a coprocessor.  UDX is supported under a special contract through an IBM or approved third-party service  offering. The Crypto Cards website directs your request to an IBM Global Services location  for your geographic location. A special contract is negotiated between IBM Global Services  and you for the development of the UDX code by IBM Global Services according to your  specifications and an agreed-upon level of the UDX. A UDX toolkit for IBM Z servers is tied to specific versions of the CCA card code and the  related host code. UDX is available for the Crypto Express6S (Secure IBM CCA coprocessor  mode only) features. An UDX migration is no more disruptive than a normal Microcode  Change Level (MCL) or ICSF release migration.  In z14 servers, up to four UDX files can be imported. These files can be imported only from a  DVD. The UDX configuration window is updated to include a Reset to IBM Default button. Consideration:  CCA features a new code level starting with z13 servers, and the UDX  clients require a new UDX. On z14 servers, the Crypto Express6S card is delivered with CCA Level 6.0 firmware. A new  set of cryptographic functions and callable services are provided by the IBM CCA LIC to  enhance the functions that secure financial transactions and keys. The Crypto Express6S  includes the following features: z14 servers have support for up to 85 LPARs. The IBM Z crypto architecture was designed to  support 16 domains, which matched the LPAR maximum at the time. Before z13 servers, in  customer environments where the number of LPARs was larger than 16, crypto workload  separation can be complex. These customers had to map a large set of LPARs to a small set  of crypto domains. Now in z14 servers, the IBM Z crypto architecture can support up to 256 domains in an  adjunct processor (AP) with the AP extended addressing (APXA) facility that is installed. As  such, the Crypto Express cards are enhanced to handle 256 domains, and the IBM Z  firmware provides up to 85 domains to customers (to match the current LPAR maximum).  224  IBM z14 (3906) Technical Guide