Regional Crypto Enablement Web deliverables z/OS Integrated Cryptographic Service Facility Starting with z13 GA2, IBM enabled geo-specific cryptographic support that is supplied by  IBM approved vendors. China is the first geography to use this support to meet the  cryptography requirements of Chinese clients that are required to comply with the People’s  Bank of China Financial IC Card Specifications (PBOC 3.0) for payment card processing.  When ordered, the Regional Crypto Enablement (RCE) support reserves the I/O slot or slots  for the IBM approved vendor-supplied cryptographic card or cards. Clients must contact the  IBM approved vendor directly for purchasing information. RCE is a framework to enable the integration of IBM certified third-party cryptographic  hardware for regional or industry encryption requirements. It also supports the use of  cryptography algorithms and equipment from selected providers with IBM Z in specific  countries. Support for the use of international algorithms (AES, DES, RSA, and ECC) with  regional crypto devices (supporting regional algorithms, such as SMx) is added to the ICSF  PKCS#11 services. The supported operating systems are listed in Table 7-10 on page 225 and Table 7-11 on  page 226. For more information about web-deliverable code on z/OS, see the z/OS downloads website. For Linux on Z, support is delivered through IBM and the distribution partners. For more  information, see Linux on Z on the IBM developerWorks website. Integrated Cryptographic Service Facility (ICSF) is a base component of z/OS. It is designed  to transparently use the available cryptographic functions, whether CPACF or Crypto Express,  to balance the workload and help address the bandwidth requirements of the applications. Despite being a z/OS base component, ICSF functions are generally made available through  web deliverable support a few months after a new z/OS release. Therefore, new functions are  related to an ICSF function modification identifier (FMID) instead of a z/OS version. z/OS V2.2 and V2.3 require ICSF Web Deliverable WD18 (HCR77D0) to support the  following features: ICSF HCR77D0 - Cryptographic Support for z/OS V2R2 and z/OS V2R3 GLYPH<SM590000> Support for the updated German Banking standard (DK): – CCA 5.4 & 6.1 $^{14}$: GLYPH<129> ISO-4 PIN Blocks (ISO-9564-1) GLYPH<129> Directed keys: A key can encrypt or decrypt data, but not both. GLYPH<129> Allow AES transport keys to be  used to export or import  DES  keys in a standard  ISO 20038 key block. This feature helps with interoperability between CCA and  non-CCA systems. GLYPH<129> Allow AES transport keys to be used to export or import a small subset of  AES  keys  in a standard ISO 20038 key block. This feature helps with interoperability between  CCA and non-CCA systems.  GLYPH<129> Triple-length TDES keys with Control Vectors for increased data confidentiality. 14 CCA 5.4 and 6.1 enhancements are also supported for z/OS V2R1 with ICSF HCR77C1 (WD17) with SPEs  (Small Program Enhancements (z/OS continuous delivery model). Chapter 7. Operating system support  267