kbrain

IBM® z/OS® Version 2 Release 4 ICSF PKCS #11 Cryptographic Module

IBM Corporation - FIPS 140 #4591

historicalLevel 1

ICSF is a software element of z/OS that works with hardware cryptographic features and the Security Server (RACF) to provide secure, high-speed cryptographic services in the z/OS environment. ICSF, which runs as a started task, provides the application programming interfaces by which applications request the cryptographic services.

Key facts

Scheme
FIPS 140
Certificate
4591
Standard
FIPS 140-2
Security level
Level 1
Status
historical
Vendor
IBM Corporation
Module type
Software-Hybrid
Embodiment
Multi-Chip Stand Alone
Lab
atsec information security corporation
First validated
September 11, 2023
Versions
COP chips integrated within processor unit [1] and COP chips integrated within processor unit and P/N 02WN654-N37880 (Low Power) [2]; Feature 3863 (aka FC3863) with System Driver Level 41C [1], and Feature 3863 (aka FC3863) with System Driver Level 41C and CCA 7.0.68z [2]; ICSF level HCR77D0 with APAR OA63132
Caveat
When operated in FIPS mode with module IBM(R) z/OS(R) Version 2 Release 4 Security Server RACF(R) Signature Verification Module validated to FIPS 140-2 under Cert. #2691 operating in FIPS mode

Algorithms

  • AES
  • DRBG
  • DSA
  • ECDSA
  • HMAC
  • KAS-SSC
  • KTS
  • RSA
  • SHS
  • Triple-DES

Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.

CVEs that may affect this product

sec-certs has not matched any CVE to this certificate. That is not proof the product is unaffected.

Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.

Certificates it builds on

  • 2691

Certificate ids found in this certificate's documents (automated extraction).

Documents and sources

Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026

Check certifications from your AI assistant

The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.

Add the certifications brain