GLYPH<129> Directed keys: A key can either encrypt or decrypt data, but not both. GLYPH<129> Allow AES transport keys to  be used to export/import  DES  keys in a standard ISO  20038 key block. This feature helps with interoperability between CCA and  non-CCA systems. GLYPH<129> Allow AES transport keys to be used to export/import a small subset of  AES  keys in  a standard ISO 20038 key block. This feature helps with interoperability between  CCA and non-CCA systems.  GLYPH<129> Triple-length TDES keys with Control Vectors for increased data confidentiality. – CCA 6.2: PCI HSM 3K DES - Support for triple length DES keys (standards  compliance) GLYPH<SM590000> EP11 Stage 4: – New elliptic curve algorithms for PKCS #11 signature, key derivation operations: GLYPH<129> Ed448 elliptic curve GLYPH<129> EC25519 elliptic curve – EP11 Concurrent Patch Apply: Allows service to be applied to the EP11 coprocessor  dynamically without taking the crypto adapter offline (already available for CCA  coprocessors). – eIDAS compliance: eIDAS cross-border EU regulation for portable recognition of  electronic identification. GLYPH<SM590000> Usage and administration of Crypto Express6S GLYPH<SM590000> Coprocessor in PCI-HSM Compliance Mode (enablement requires TKE 9.0 or newer). GLYPH<SM590000> z14 CPACF support. For more information, see “CP Assist for Cryptographic Function” on  page 316. GLYPH<SM590000> Crypto Usage Statistics: When enabled, ICSF aggregates statistics that are related to  crypto workloads and logs to an SMF record. GLYPH<SM590000> Panel-based CKDS Administration: ICSF added an ISPF, panel-driven interface that  allows interactive administration (View, Create, Modify, and Delete) of CKDS keys. GLYPH<SM590000> CICS End User Auditing: When enabled, ICSF retrieves the CICS user identity and  includes it as a log string in the SAF resource check. The user identity is not checked for  access to the resource. Instead, it is included in the resource check (SMF Type 80)  records that are logged for any of the ICSF SAF classes protecting crypto keys and  services (CSFKEYS, XCSFKEY, CRYPTOZ, and CSFSERV). For more information about ICSF versions and FMID cross-references, see the  z/OS: ICSF  Version and FMID Cross Reference , TD103782, abstract that is available at the IBM Techdoc  website. For PTFs that allow previous levels of ICSF to coexist with the Cryptographic Support for  z/OS 2.1 - z/OS V2R3 (HCR77C1) web deliverable, check below FIXCAT, as shown in the  following example: IBM.Coexistence.ICSF.z/OS_V2R1-V2R3-HCR77C1 The following software enhancements are available in ICSF Web Deliverable HCR77C1: This feature might be configured as an accelerator (CEX6A), a CCA coprocessor  (CEX6C), or an EP-11 coprocessor (CEX6P). ICSF Web Deliverable HCR77C1 provides support for the following features: ICSF HCR77C1 - Cryptographic Support for z/OS V2R1 - z/OS V2R3 318  IBM z15 (8561) Technical Guide