8860ch10.fm Draft Document for Review September 23, 2019 1:06 am 128-, and 256 bit support. SHA-1, SHA-2 and SHA3 are shipped enabled on all IBM z15  and do not require the no-charge enablement feature 3863. The total number of cryptographic PCIe adapters (combined Crypto Express7S, Crypto  Express6S or Crypto Express5S features) cannot exceed 16 per z15. The initial order for Crypto Express7S is two features (two PCIe adapters for FC 0899, four  PCIe adapters for FC 0898). After the initial order, the minimum order is one feature. Each Crypto Express7S FC 0899 feature contains one PCIe adapter, each Crypto Express7S  FC 0898 feature contains one PCIe adapter. The adapter can be in the following  configurations: During the feature installation, the PCIe adapter is configured by default as the CCA  coprocessor. The configuration of the Crypto Express7S adapter as EP11 coprocessor requires a Trusted  Key Entry (TKE) workstation Hardware 9.2 (FC 0087 for the rack mounted workstation, FC  0088 for the tower workstation) with TKE 9.2 Licensed Internal Code (FC 0881). The Crypto Express7S feature does not use CHPIDs from the channel subsystem pool.  However, the Crypto Express7S feature requires one slot in a PCIe I/O drawer, and one  physical channel ID (PCHID) for each PCIe cryptographic adapter. Table 10-1 summarizes the cryptographic feature codes for z15. Table 10-1 Cryptographic feature codes GLYPH<SM590000> For Key Generation: Pseudo-Random Number Generation (PRNG), Deterministic  Random Number Generation (DRNG), and True Random number generation (TRNG). GLYPH<SM590000> For message authentication code (MAC): Single-key MAC and double-key MAC. GLYPH<SM590000> Common Cryptographic Architecture (CCA) Coprocessor (CEX7C)  GLYPH<SM590000> Public Key Cryptography Strandards (PKCS) #11 (EP11) Coprocessor (CEX7P) GLYPH<SM590000> Accelerator (CEX7A) Feature  code Description 3863 CP Assist for Cryptographic Functions (CPACF) enablement:  This feature is a prerequisite to use CPACF (except for SHA-1, SHA-2, and SHA-3)  and cryptogrphic coprocessor hardware. 0898 Crypto Express7S (2 port) card:  A maximum of 8 features can be ordered (minimum of two adapters). This is an  optional feature, each feature of which contains two PCI Express cryptographic  adapters (adjunct processor). This feature is supported only in z15. 0899 Crypto Express7S (1 port) card:  A maximum of 16 features can be ordered (minimum of two adapters). This is an  optional feature, each feature of which contains one PCI Express cryptographic  adapter (adjunct processor). This feature is supported only in z15. 0893 Crypto Express6S card:  This feature cannot be ordered for a new build z15, but only on a carry forward MES  from z14. A maximum of 16 features can be ordered (minimum of two adapters). This is an  optional feature, each feature of which contains one PCI Express cryptographic  adapter (adjunct processor). This feature is supported in z15, z14, and z14 ZR1. Chapter 10. Specialized features  219