IBM 990 1.3.9 Parallel Sysplex support

Chapter 1. IBM zSeries 990 overview 13

Draft Document for Review April 7, 2004 6:15 pm 6947ch01.fm

These cryptographic functions are implemented in every PU; the affinity problem of pre-z990

systems is eliminated. The Crypto Assist Architecture includes DES and T-DES data

en/decryption, MAC message authentication, and SHA-1 secure hashing. These functions

are directly available to application programs (zSeries Architecture instructions). SHA-1 is

always enabled, but other cryptographic functions are available only when the Crypto

enablement feature (FC 3863) is installed.

The Peripheral Component Interconnect Cryptographic Accelerator (PCICA) feature has two

accelerator cards per feature and is an optional addition, along with the Peripheral

Component Interconnect X Cryptographic Coprocessor (PCIXCC) FC0868. The PCICA is a

very fast cryptographic processor designed to provide leading-edge performance of the

complex RSA cryptographic operations used with the Secure Sockets layer (SSL) protocol

supporting e-business. The PCICA feature is designed specifically for maximum speed SSL

acceleration.

Each zSeries PCI Cryptographic Accelerator feature (PCICA) contains two accelerator cards

and can support up to 2100 SSL handshakes per second.

The Peripheral Component Interconnect X Cryptographic Coprocessor (PCIXCC) feature has

one coprocessor and is an optional addition, containing support to satisfy high-end server

security requirements by providing full checking and fully programmable functions and User

Defined Extension (UDX) support.

The PCIXCC adapter is intended for applications demanding high security. The PCIXCC

feature is designed for the FIPS 140-2 Level 4 compliance rating for secure cryptographic

hardware.

1.3.9 Parallel Sysplex support

A 4-port ISC-3 card structure is provided on the z900 family of processors. It consists of a

mother card with two daughter cards that have two ports each. Each daughter card is capable

of operating at 1 gigabit/sec in compatibility mode (HiPerLink) or 2 gigabits/sec in peer mode

up to 10 km. The mode is selected for each port via CHPID type in the IOCDS.

InterSystem Coupling Facility-3 (ISC-3) channels provide the connectivity required for data

sharing between the Coupling Facility and the CPCs directly attached to it. ISC-3 channels

are point-to-point connections that require a unique channel definition at each end of the

channel. ISC-3 channels operating in peer mode provide connection between z990, z890,

and z900 general purpose models and z900-based Coupling Facility images. ISC-3 channels

operating in compatibility mode provide connection between z990 models and ISC HiperLink

channels on 9672 G5/G6 models.

Note: To enable the function of the PCICA feature, the CP Assist feature (feature code

3863) must be installed.

Note: To enable the function of the PCIXCC feature, the CP Assist feature (feature code

3863) must be installed.