The feature codes and purpose of the cryptographic hardware features that are available for  IBM z14 ZR1 are listed in Table 6-1. Table 6-1 Cryptographic features for IBM z14 ZR1 Feature  code Description 3863 CP Assist for Cryptographic Function (CPACF) enablement This feature is a prerequisite to use CPACF (except for SHA-1, SHA-224, SHA-256,  SHA-384, and SHA-512) and the Crypto Express6S and Crypto Express5S feature. 0893 Crypto Express6S adapter A maximum of 16 features can be ordered (minimum of two features). This feature is  optional and each feature of which contains one PCI Express cryptographic adapter  (adjunct processor). This feature is supported only in z14. 0890 Crypto Express5S adapter This feature is available as a carry forward MES from z13s. The maximum supported  number of Crypto Express5S and Crypto Express6S together is 16. This feature is  optional and each feature of which contains one PCI Express cryptographic adapter  (adjunct processor). This feature is supported only in z14, z13, and z13s systems. 0086 TKE tower workstation A TKE provides basic key management (key identification, exchange, separation,  update, and backup) and security administration. It is optional for running a Crypto  Express6S or Crypto Express5S adapter in CCA mode and required for running it in  EP11 mode. The TKE workstation has one Ethernet port, and supports connectivity to  an Ethernet local area network (LAN) operating at 10, 100, or 1000 Mbps. Up to 10  features per z14 ZR1 can be ordered. 0085 TKE rack-mounted workstation The rack-mounted version of the TKE, which needs a customer-provided standard  19-inch rack or the use of the new 16U Reserved feature (FC 0617) for the z14 ZR1  rack. It features a 1u TKE unit and an (optional) 1u console tray (screen, keyboard, and  pointing device). When smart card readers are used, another customer-provided tray is  needed. Up to 10 features per z14 ZR1 can be ordered. 0880 TKE 9.1 Licensed Internal Code (LIC) Included with the TKE tower workstation FC 0847 and the TKE rack-mounted  workstation FC 0085 for z14 ZR1. Earlier versions of TKE features (feature codes:  0080, 0081, 0081, 0085, 0086, and 0849) can also be upgraded to TKE 9.1 LIC. 0879 TKE 9.0 Licensed Internal Code (LIC) Included with the TKE tower workstation FC 0847 and the TKE rack-mounted  workstation FC 0085 for z14. Earlier versions of TKE features (feature codes 0080,  0081, 0081, 0085, 0086, and 0849) can also be upgraded to TKE 9.0 LIC. 0891 TKE Smart Card Reader Access to information in the smart card is protected by a PIN. One feature code  includes two smart card readers, two cables to connect to the TKE workstation, and 20  smart cards.  180  IBM 14 Model ZR1 Technical Guide