IBM® z/OS® Version 2 Release 1 ICSF PKCS #11 Cryptographic Module
Caveat: When operated in FIPS mode with module IBM(R) z/OS(R) Version 2 Release 1 Security Server RACF(R) Signature Verification Module version 1.0 validated to FIPS 140-2 under Cert. #2691 operating in FIPS mode
Certificate
| Certificate number | 2763 |
|---|---|
| Standard | FIPS 140-2 |
| Status | historical |
| Overall level | 1 |
| Module type | Software-Hybrid |
| Embodiment | Multi-Chip Stand Alone |
| Vendor | IBM® Corporation · website |
| Software versions | OA50113 |
| Hardware versions | COP chips integrated within processor unit [1] and P/N 00LV487 [2] |
| Firmware versions | Feature 3863 (aka FC3863) with System Driver Level 22H [1] and CCA 5.2.27z RC30 [2] |
Module description
ICSF is a software element of z/OS that works with hardware cryptographic features and the Security Server (RACF) to provide secure, high-speed cryptographic services in the z/OS environment. ICSF, which runs as a started task, provides the application programming interfaces by which applications request the cryptographic services.
Security level exceptions
- Mitigation of Other Attacks: N/A
Approved algorithms
| Algorithm | CAVP certificate |
|---|---|
| AES | 3958, 4036 |
| CVL | 882, 883 |
| DRBG | 1206, 1212 |
| DSA | 1092, 1097 |
| ECDSA | 901 |
| HMAC | 2633 |
| KTS | |
| RSA | 2070, 2088 |
| SHS | 3196, 3327 |
| Triple-DES | 2214 |
Other algorithms
NDRNG; RSA (key wrapping; key establishment methodology provides between 112 and 150 bits of encryption strength)
Tested configurations
- IBM z/OS Version 2 Release 1 running on an IBM z13 (single-user mode)
Validation history
| Date | Type | Lab |
|---|---|---|
| 2016-10-06 | Initial | atsec information security corporation |
| 2018-02-20 | Update | atsec information security corporation |
Status timeline
As observed by this tracker's snapshots. NIST publishes no dates for list moves; observation began 2026-08-21, so earlier changes carry no date.
- 2026-08-21: first observed by this tracker, status historical
- Validation dates on record: 2016-10-06, 2018-02-20