IBM z13s Technical Manual page 316

ICSF
FMID
HCR77A1
HCR77B0
HCR77B1
a. Service is required.
288
IBM z13s Technical Guide
z/OS Web deliverable name
V2R1 Cryptographic Support for
V1R13 z/OS V1R13-V2R1
V1R12
V2R2 Cryptographic Support for
V2R1 z/OS V1R13-z/OS V2R1
V1R13 Included as a base
element of z/OS V2R2
V2R2 Cryptographic Support for
V2R1 z/OS V1R13 - z/OS V2R2
V1R13
Supported function
AP Configuration Simplification
KDS Key Utilization Statistics
Dynamic SSM
UDX Reduction and Simplification
Europay-Mastercard-Visa (EMV)
Enhancements
Key wrapping and other security
enhancements
OWH/RNG Authorization Access
SAF ACEE Selection
Non-SAF Protected IQF
RKX Key Export Wrapping
AES MAC Enhancements
PKCS #11 Enhancements
Improved CTRACE Support
z13 / z13s & CEX5 support, including
support for sharing cryptographic
coprocessors across a maximum of 85 (for
z13) / 40 (for z13s servers) domains
VISA Format Preserving Encryption
(VFPE) services
DK AES PIN and AES MAC Generate and
Verify Services
Support for exploitation of counter mode
(CTR) for AES-based encryption on z196
and later processors
Enhanced random number generation
exploiting CPACF Deterministic Random
Number Generate (DRNG) instruction with
ability to disable RNG Cache
Services and support for key archiving and
key material validity;
Enhancement to the ICSF Multi-Purpose
service, CSFMPS, for change master key
operation dry run
ICSF Console command support
Support for EMV Simplification services
Support for RSAES-OAEP formatting in
PKA Decrypt and Encrypt services,
Support in Key Generate for CIPHER,
DATAC, and DATAM keys in OP, IM, or EX
form
Operational Key Load support for HMAC
keys loaded from the TKE
Additional DK AES PIN support