IBM z13s Technical Manual page 240

Each z13s server supports up to 16 Crypto Express5S features. Table 6-2 shows
configuration information for Crypto Express5S.
Table 6-2 Crypto Express5S features
Feature
Minimum number of orderable features for each server
Order increment above two features
Maximum number of features for each server
Number of PCIe cryptographic adapters for each feature
(coprocessor or accelerator)
Maximum number of PCIe adapters for each server
Number of cryptographic domains for each PCIe adapter
a. The minimum initial order of Crypto Express5S features is two. After the initial order, more
Crypto Express5S features can be ordered one feature at a time, up to a maximum of 16.
b. More than one partition, which is defined to the same CSS or to different CSSs, can use the
same domain number when assigned to different PCIe cryptographic adapters.
The concept of
Whether configured as a coprocessor or an accelerator, the PCIe cryptographic adapter is
made available to an LPAR. It is made available as directed by the domain assignment and
the candidate list in the LPAR image profile. This availability is not changed by the shared or
dedicated status that is given to the CPs in the partition.
When installed non-concurrently, Crypto Express5S features are assigned PCIe
cryptographic adapter numbers sequentially during the power-on reset (POR) that follows the
installation. When a Crypto Express5S feature is installed concurrently, the installation can
select an out-of-sequence number from the unused range. When a Crypto Express5S feature
is removed concurrently, the PCIe adapter numbers are automatically freed.
The definition of domain indexes and PCIe cryptographic adapter numbers in the candidate
list for each LPAR must be planned to allow for nondisruptive changes:
Operational changes can be made by using the Change LPAR Cryptographic Controls
task from the SE, which reflects the cryptographic definitions in the image profile for the
partition. With this function, adding and removing the cryptographic feature on a running
operating system can be done dynamically.
The same usage domain index can be defined more than once across multiple LPARs.
However, the PCIe cryptographic adapter number that is coupled with the usage domain
index that is specified must be unique across all active LPARs.
The same PCIe cryptographic adapter number and usage domain index combination can be
defined for more than one LPAR (up to 40). For example, you might define a configuration for
backup situations. However, only one of the LPARs can be active at a time.
For more information, see 6.5.5, "Management of Crypto Express5S" on page 219.
212
IBM z13s Technical Guide
dedicated processor
does not apply to the PCIe cryptographic adapter.
a
2
1
16
1
16
b
40
Quantity