This operational management manual provides instructions and information concerning the identification, installation, configuration, and maintenance of the CEX8.
This manual provides operational guidance for the IBM CEX8, marketed as the Crypto Express8S, a cryptographic coprocessor security module for IBM Z servers. It covers PCI PTS HSM compliance, key management, device lifecycle, and tamper protection. The document is intended for financial industry users managing payment-processing applications.
The CEX8 supports PCI PTS HSM standards and includes features like dual control, secure auditing, and key usage restrictions to enhance security. It is designed for use with IBM’s Common Cryptographic Architecture (CCA) firmware, which supports both compliant and non-compliant applications.
The device is the IBM 4770-001 Cryptographic Coprocessor Security Module.
The firmware meets the June 2016 Payment Card Industry PIN Transaction Security Hardware Security Module Version 3.0 standard.
The technology meets the requirements of Federal Information Processing Standard Publication 140-2, Level 4.