kbrain

IBM® z/OS® Version 2 Release 3 ICSF PKCS #11 Cryptographic Module

IBM Corporation - FIPS 140 #3555

historicalLevel 1

ICSF is a software element of z/OS that works with hardware cryptographic features and the Security Server (RACF) to provide secure, high-speed cryptographic services in the z/OS environment. ICSF, which runs as a started task, provides the application programming interfaces by which applications request the cryptographic services.

Key facts

Scheme
FIPS 140
Certificate
3555
Standard
FIPS 140-2
Security level
Level 1
Status
historical
Vendor
IBM Corporation
Module type
Software-Hybrid
Embodiment
Multi-Chip Stand Alone
Lab
atsec information security corporation
First validated
October 23, 2019
Versions
COP chips integrated within processor unit [1], COP chips integrated within processor unit and P/N 00LV498 [2] and COP chips integrated within processor unit and P/N 01PP167 [3]; Feature 3863 (aka FC3863) with System Driver Level 32L [1], Feature 3863 (aka FC3863) with System Driver Level 32L and CCA 5.3.20z [2] and Feature 3863 (aka FC3863) with System Driver Level 32L and CCA 6.0.8z [3]; HCR77C0 with APAR OA56129
Caveat
When operated in FIPS mode with module IBM(R) z/OS(R) Version 2 Release 3 Security Server RACF(R) Signature Verification Module validated to FIPS 140-2 under Cert. #2691 operating in FIPS mode

Algorithms

  • AES
  • CVL
  • DRBG
  • DSA
  • ECDSA
  • HMAC
  • KTS
  • RSA
  • SHS
  • Triple-DES

Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.

CVEs that may affect this product

sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.

Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.

Certificates it builds on

  • 2691

Certificate ids found in this certificate's documents (automated extraction).

Documents and sources

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026

Check certifications from your AI assistant

The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.

Add the certifications brain
IBM® z/OS® Version 2 Release 3 ICSF PKCS #11 Cryptographic Module - FIPS 140 #3555