c4

Revised:  January 25, 2005.



Revised:  February 15, 2005.



2c12



6c16



0c20



4c24



8c28



0c30



77,478d476

Maximum


Not applicable.


59a658
3584-HA1 |X| IBM TotalStorage 3584 High Availability Frame Model HA1

22c821,822
4963 |A| PCI Cryptographic Coprocessor (FIPS-4)
4963 |N| PCI Cryptographic Coprocessor (FIPS-4)
4964 |A| PCI Cryptographic Coprocessor

61c961



68c968



72c972



76c976



81c981



85c985



90,991c990,991

Physical Specifications



Physical Specifications



011,1012c1011,1012

Operating Environment



Operating Environment



071,1072c1071,1072

Limitations



Limitations



317,1318c1317,1318

Hardware Requirements



Hardware Requirements



595,1596c1595,1596

Software Requirements



Software Requirements



611c1611



670c1670



677c1677



681c1681



685c1685



690,1691c1690,1691

No Charge Specify Codes



No Charge Specify Codes



764,1765c1764,1765

Special Feature Codes -- Chargeable



Special Feature Codes -- Chargeable



816a1817
  • (#4964) - PCI Cryptographic Coprocessor

    988a3990

    (No Longer Available as of February 8, 2005)


    058a4061,4137

    (#4964) PCI Cryptographic Coprocessor


    The IBM PCI Cryptographic Coprocessor is a 2/3 length PCI adapter
    combining hardware and software designed to provide high performance
    hardware engines for secure internet transactions such as data exchange,
    verifying electronic signatures, bulk data encryption and decryption.
    Cryptographic processes are performed within a tamper resistant
    enclosure on the adapter that is designed to meet FIPS PUB 140-1
    standard for commercial cryptographic devices at Level 3.

    Security functions supported by the adapter includes:


    • Data Encryption Standard (DES) (56 and 40 bit keys) encryption and
      decryption, with pre- and post-padding; the coprocessor uses both
      electronic and codebook (ECB) and cipher block chain (CBC) modes of
      encryption.
    • Message Authentication (MAC) and financial PIN processing
    • Triple DES encryption and decryption of general data
    • RSA key-pair generation
    • RSA signature generation and signature verification
    • Secure Hashing Algorithm (SHA-1) in hardware
    • Hardware random number generation
    • Protected data storage and retrieval
    • Other non-cryptographic security utilities can be carried out
      using the onboard processor

    IBM offers software to enable your use of the Coprocessors. Two
    different approaches to cryptographic functions are offered for
    download from:


    http://www.ibm.com/security/cryptocards


    • PKCS #11 Version 2.01, an implementation of the industry-standard
      API
    • IBM Common Cryptographic Architecture (CCA), featuring support of
      special interest to the finance industry.

    Under custom contract, IBM also offers toolkits that you can employ
    to develop extensions to the CCA offering and to develop your own
    application to exploit the secure computing environment and
    cryptographic hardware. For more information on custom contracts,
    refer to:


    http://www.ibm.com/security/cryptocards.

    For additional information on the IBM PCI Cryptographic Coprocessor,
    refer to the following World Wide Web page:


    Limitations:


    • The IBM PCI Cryptographic Coprocessor Adapter is a field only
      installed device in order to meet restrictive shipping requirements.

    Note: This adapter may have AIX 5.1 support limitations. Go to the
    following URL to view the latest AIX 5.1 support limitation statements:


    http://www.ibm.com/servers/aix/os/adapters/51.html



    • Attributes provided: Data encryption via PCI bus to host
    • Attributes required: 1 PCI slot
    • For 7028-6C1: (#4964)

      • Minimum required: 0
      • Maximum allowed: 2 (Initial order maximum: 2 )
      • OS level required: AIX V4.3.3 or 5.1 or later.
        For Linux informaion, refer to:
        http://www.ibm.com/servers/eservers/pseries/hardware/
        factsfeatures.html
         


      • Initial Order/MES/Both/Supported: Both
      • CSU: Yes
      • Return parts MES: No



    644,6645c6723,6724

    Feature Exchanges



    Feature Exchanges



    651c6730



    663c6742



    673c6752



    681c6760