Smart card readers from FC 0885 or FC 0891 can be carried forward. Smart cards can be  used on TKE 9.0 with these readers. Access to and use of confidential data on the smart card  are protected by a user-defined PIN. Up to 990 other smart cards can be ordered for backup.  (The extra smart card feature code is FC 0892.) When one feature code is ordered, 10 smart  cards are included. The order increment is 1 - 99 (10 - 990 blank smart cards). If smart cards with applets that are not supported by the new smart card reader are reused,  new smart cards on TKE 8.1 or later must be created and the content from the old smart  cards to the new smart cards must be copied. The new smart cards can be created and  copied on a TKE 8.1 system. If the copies are done on TKE 9.0, the source smart card must  be placed in an older smart card reader from feature code 0885 or 0891. A new smart card for the Trusted Key Entry (TKE) allows stronger Elliptic Curve Cryptography  (ECC) levels. More TKE Smart Cards (FC 0900, packs of 10, FIPS certified blanks) require  TKE 9.1 LIC or up. The new TKE 9.2 LIC (FC 0881) is originally shipped with a new z15 server. The following  TKE workstations can be ordered with a new z15: Note:  Several options for ordering the TKE with or without ordering Keyboard, Mouse, and  Display are available. Ask your IBM Representative for more information about which  option is the best option for you. The TKE 9.2 LIC requires the 4768 crypto adapter. The TKE 8.x and TKE 7.3 workstations  can be upgraded to the TKE 9.2 tower workstation by purchasing a 4768 crypto adapter.  The Omnikey Cardman 3821 smart card readers can be carried forward to any TKE 9.2  workstation. Smart cards 45D3398, 74Y0551, and 00JA710 can be used on TKE 9.2. When performing a MES upgrade from TKE 7.3, TKE 8.0, or TKE 8.1 to a TKE 9.2  installation, the following steps must be completed: If you are migrating your configuration with Crypto Express5S and TKE Release 8.x to a z15,  you do not need to upgrade the TKE LIC. Note:  A workstation that was upgraded to TKE V8.x includes the 4767 cryptographic  adapter that is required to manage Crypto Express5S; however, it cannot be used to  manage the Crypto Express7S or Crypto Express6S. If your z15 includes Crypto Express7S or Crypto Express6S, you must upgrade to TKE  V9.2, which requires the 4768 cryptographic adapter. TKE upgrade considerations 6.6.3 TKE hardware support and migration information GLYPH<SM590000> TKE 9.2 tower workstation (FC 0088) GLYPH<SM590000> TKE 9.2 rack-mounted workstation (FC 0087) 1. Save Upgrade Data on an old TKE to USB memory to save client data. 2. Replace the 4767 crypto adapter with the 4768 crypto adapter.  3. Upgrade the firmware to TKE 9.2.  4. Install the Frame Roll to apply Save Upgrade Data (client data) to the TKE 9.2 system. 5. Run the TKE Workstation Setup wizard. 248  IBM z15 (8561) Technical Guide