IBM Z9, Planning Manual

Page: 30 / 274

Configurable Single Processor Crypto Express2
Available exclusively for the z9 BC, the Crypto Express2-1P feature has one PCI-X
adapter. The PCI-X adapter can be defined as either a Coprocessor or an
Accelerator. A minimum of two features must be ordered:
v
Crypto Express2-1P Coprocessor - for secure-key encrypted transactions
(default).
– Supports highly secure cryptographic functions, use of secure encrypted key
values, and User Defined Extensions (UDX).
– Is designed for Federal Information Processing Standard (FIPS) 140-2 Level 4
certification.
v Crypto Express2-1P Accelerator - for Secure Sockets Layer (SSL) acceleration.
– Supports clear key RSA acceleration.
– Offloads compute-intensive RSA public-key and private-key cryptographic
operations employed in the SSL protocol.
CP Crypto Assist Functions
CP Crypto Assist Functions (CPACF), supporting clear key encryption, offers the
following on every Processor Unit (PU) identified as a Central Processor (CP),
Integrated Facility for Linux (IFL), System z9 Integrated Information Processor
(zIIP), or System z9 Application Assist Processor (zAAP):
v
Data Encryption Standard (DES)
v Triple Data Encryption Standard (TDES)
v
Advanced Encryption Standard (AES)
v SHA-1
v
SHA-256
v Pseudo Random Number Generation (PRNG)
zSeries Parallel Sysplex
®
Support
Parallel sysplex makes use of a broad range of hardware and software products to
process in parallel a transaction processing workload across multiple z/OS images
running in a sysplex and sharing data in a coupling facility.
Parallel sysplex allows you to manage a transaction processing workload, balanced
across multiple z/OS images running on multiple CPCs, as a single data
management system. It also offers workload availability and workload growth
advantages.
The parallel sysplex enhances the capability to continue workload processing
across scheduled and unscheduled outages of individual CPCs participating in a
sysplex using a coupling facility by making it possible to dynamically reapportion the
workload across the remaining active sysplex participants. Additionally, you can
dynamically add processing capacity (CPCs or LPs) during peak processing without
disrupting ongoing workload processing.
CPC support consists of having the capability to do any or all of the following:
v
Install coupling facility channels
v Define, as an LP, a portion or all of the CPC hardware resources (central
processors, storage, and coupling facility channels) for use as a coupling facility
that connects to z/OS images for data sharing purposes
v
Connect to a coupling facility to share data
v Installing a z9 BC or z9 EC with only ICFs (1 or more) operates as a stand-alone
coupling facility; it cannot run z/OS or any other operating system.
1-4
PR/SM Planning Guide
|
|