IBM Power Systems Series, Руководство пользователя

Страница: 181 / 244

Adapter FRU number
02WF001 (Designed to comply with RoHS requirement).
I/O bus architecture
PCIe3 x16
Slot requirement
For details about slot priorities, maximums, and placement rules, see PCIe adapter placement rules
and slot priorities (http://www.ibm.com/support/knowledgecenter/POWER9/p9eab/
p9eab_mtm_pciplacement.htm) and select the system you are working on.
Voltage
12 V
Form factor
Full-height, half-length
PCIe Cryptographic Coprocessor (FC EJ27 and FC EJ28; CCIN 4765)
Learn about the specifications for the PCIe Cryptographic Coprocessor.
The PCIe Cryptographic Coprocessor adapters, feature codes (FC) EJ27 and FC EJ28 provide the secure-
key cryptographic accelerator and the Cryptographic Coprocessor functions in a single PCIe card. The
coprocessor functions are targeted to banking and finance applications. The financial personal
identification number (PIN) processing and Euro pay, Mastercard, Visa (EMV) credit card functions are
provided. EMV is a standard for the integrated-chip based credit cards. The secure-key accelerator
functions are targeted to improving the performance of Secure Sockets Layer (SSL) transactions. The FC
EJ27 and FC EJ28 provide the security and performance required to support emerging digital signature
applications. The host application access to the cryptographic services of the FC EJ27 and FC EJ28 are by
the Common Cryptographic Architecture (CCA) application programming interfaces (APIs) and by the
Public-Key Cryptographic Standards (PKCS11). The FC EJ27 and FC EJ28 provide secure storage of
cryptographic keys in a tamper-resistant hardware security module, which is designed to meet FIPS PUB
140-2 on security requirements.
The FC EJ27 and FC EJ28 are the same adapter but the different FCs indicate if a blind-swap cassette is
used and the type of the cassette.
• FC EJ27 is not a blind-swap cassette
• FC EJ28 is a generation-3 blind-swap cassette
IBM PCIe Cryptographic adapter highlights:
• PCIe 4x standard height - half length
• Integrated Dual PPC processors
• ASIC (Accelerator engines)
• Supports the Common Cryptographic Architecture (CCA) application programming interfaces (APIs) and
the Public-Key Cryptographic Standards (PKCS11) on the single firmware load.
• 3072, 4096 bit RSA CRT HW (including routing)
• SHA 256 required HW or firmware within secure module (including routing)
• Secure Key AES 128, 192, 256 bit keys
• Fast path – symmetric and asymmetric (secure and clear key)
For details about slot priorities, maximums, and placement rules, see PCIe adapter placement rules and
slot priorities (http://www.ibm.com/support/knowledgecenter/POWER9/p9eab/
p9eab_mtm_pciplacement.htm) and select the system you are working on.
Operating system or partition requirements
If you are installing a new feature, ensure that you have the software that is required to support the new
feature and that you determine whether any prerequisites must be met for this feature and attaching
devices. For information about operating system and partition requirements, see one of the following
topics:
Managing PCIe adapters 167