426
IBM z13s Technical Guide
Figure 11-30 shows an example of the Cryptographic Configuration window.
Figure 11-30 Cryptographic Configuration window
The Usage Domain Zeroize task is provided to clear the appropriate partition crypto keys for a
usage domain when you remove a crypto card from a partition. Crypto Express5S in EP11
mode is configured to the standby state after zeroize.
For more information, see
IBM z13 Configuration Setup, SG24-8260.
Digitally signed firmware
Critical issues with firmware upgrades are security and data integrity. Procedures are in place
to use a process to digitally sign the firmware update files that are sent to the HMC, the SE,
and the TKE. Using a hash algorithm, a message digest is generated that is then encrypted
with a private key to produce a digital signature.
This operation ensures that any changes that are made to the data are detected during the
upgrade process by verifying the digital signature. It helps ensure that no malware can be
installed on z Systems products during firmware updates. It enables the z13s Central
Processor Assist for Cryptographic Function (CPACF) functions to comply with Federal
Information Processing Standard (FIPS) 140-2 Level 1 for Cryptographic Licensed Internal
Code (LIC) changes. The enhancement follows the z Systems focus on security for the HMC
and the SE.
11.5.14 Installation support for z/VM using the HMC
Starting with z/VM V5R4 and System z10, Linux on z Systems can be installed in a z/VM
virtual machine from HMC workstation media. This Linux on z Systems installation can use
the existing communication path between the HMC and the SE. No external network or extra
network setup is necessary for the installation.
11.5.15 Dynamic Partition Manager
DPM is a z Systems mode of operation that provides a simplified approach to create and
manage virtualized environments, reducing the barriers of its adoption for new and existing
customers. For more information about Dynamic Partition Manager (DPM), see Appendix E.,
“IBM Dynamic Partition Manager” on page 501.
Summary of Contents for z13s
Page 2: ......
Page 3: ...International Technical Support Organization IBM z13s Technical Guide June 2016 SG24 8294 00 ...
Page 24: ...THIS PAGE INTENTIONALLY LEFT BLANK ...
Page 164: ...136 IBM z13s Technical Guide ...
Page 226: ...198 IBM z13s Technical Guide ...
Page 256: ...228 IBM z13s Technical Guide ...
Page 414: ...386 IBM z13s Technical Guide ...
Page 464: ...436 IBM z13s Technical Guide ...
Page 476: ...448 IBM z13s Technical Guide ...
Page 498: ...470 IBM z13s Technical Guide ...
Page 502: ...474 IBM z13s Technical Guide ...
Page 568: ...540 IBM z13s Technical Guide ...
Page 578: ...550 IBM z13s Technical Guide ...
Page 584: ...556 IBM z13s Technical Guide ...
Page 585: ...ISBN 0738441678 SG24 8294 00 1 0 spine 0 875 1 498 460 788 pages IBM z13s Technical Guide ...
Page 586: ......
Page 587: ......
Page 588: ...ibm com redbooks Printed in U S A Back cover ISBN 0738441678 SG24 8294 00 ...