The feature codes and purpose of the cryptographic hardware features that are available for  IBM z15 are listed in Table 6-1. Table 6-1 Cryptographic features for IBM z15 224  IBM z15 (8561) Technical Guide Feature  code Description 3863 CP Assist for Cryptographic Function (CPACF) enablement This feature is a prerequisite to use CPACF (except for SHA-1, SHA-224, SHA-256,  SHA-384, and SHA-512) and the PCIe Crypto Express features. 0898 0899 Crypto Express7S feature (2-port/#0898, 1-port/#0899) a These features are optional. The 2-port feature contains two PCIe Express  cryptographic adapters, which can be independently defined as Coprocessor or  Accelerator. The 1-port feature contains one PCIe Express cryptographic adapter.  These features are supported only in z15. 0893 Crypto Express6S adapter a This feature is available as a carry forward MES from z14. This feature is optional and  each feature of which contains one PCI Express cryptographic adapter (adjunct  processor). This feature is supported in z15 and z14. 0890 Crypto Express5S adapter a This feature is available as a carry forward MES from z14 or z13. This feature is optional  and each feature of which contains one PCI Express cryptographic adapter (adjunct  processor). This feature is supported in z15, z14, z13, and z13s systems. 0088 TKE tower workstation A TKE provides basic key management (key identification, exchange, separation,  update, and backup) and security administration. It is optional for running a Crypto  Express feature in CCA mode in non PCI-compliant environment. It is required for  running in EP11 mode and CCA mode with full PCI compliance. The TKE workstation  has one 1000BASE-T Ethernet port, and supports connectivity to an Ethernet local  area network (LAN). Up to 10 features combined with 0087 per z15 can be ordered. 0087 TKE rack-mounted workstation The rack-mounted version of the TKE, which needs a customer-provided standard  19-inch rack. It features a 1u TKE unit and an (optional) 1u console tray (screen,  keyboard, and pointing device). When smart card readers are used, another  customer-provided tray is needed. Up to 10 features combined with 0088 per z15 can  be ordered. 0881 TKE 9.2 Licensed Internal Code (LIC) Included with the TKE tower workstation FC 0088 and the TKE rack-mounted  workstation FC 0087 for z15. Earlier versions of TKE features (feature codes: 0080,  0081, 0085, and 0086) can also be upgraded to TKE 9.2 LIC, if the TKE is assigned to  a z14 or later. 0891 TKE Smart Card Reader Access to information in the smart card is protected by a PIN. One feature code  includes two smart card readers, two cables to connect to the TKE workstation, and 20  smart cards. 