GLYPH<SM590000> TR-34 Remote Key Load 

## User-defined extensions support 

User-defined extension (UDX) allows a developer to add customized operations to IBM’s CCA Support Program. UDXs to the CCA support customized operations that run within the Crypto Express features when defined as a coprocessor. 

UDX is supported under a special contract through an IBM or approved third-party service offering. The Crypto Cards website directs your request to an IBM Global Services location for your geographic location. A special contract is negotiated between IBM Global Services and you for the development of the UDX code by IBM Global Services according to your specifications and an agreed-upon level of the UDX. 

A UDX toolkit for IBM Z is tied to specific versions of the CCA code and the related host code. UDX is available for the Crypto Express7S and Crypto Express6S (Secure IBM CCA coprocessor mode only) features. An UDX migration is no more disruptive than a normal Microcode Change Level (MCL) or ICSF release migration. 

In z15, up to four UDX files can be imported. These files can be imported from a USB media stick or an FTP server. The UDX configuration window is updated to include a Reset to IBM Default button. 

Consideration:  CCA features a new code level starting with z13 systems, and the UDX clients require a new UDX. 

On z15, Crypto Express7S is delivered with CCA Level 6.3 firmware. A new set of cryptographic functions and callable services is provided by the IBM CCA LIC to enhance the functions that secure financial transactions and keys. The Crypto Express7S includes the following features: 

GLYPH<SM590000> Greater than 16 domains support up to 85 LPARs on z15. 

GLYPH<SM590000> Payment Card Industry (PCI) PIN Transaction Security (PTS) HSM Certification that is exclusive to z15 in combination with CEX7S or CEX6S features, and z14 and CEX6S features. 

GLYPH<SM590000> VFPE support, which was introduced with z13/z13s systems. 

GLYPH<SM590000> AES PIN support for the German banking industry. 

GLYPH<SM590000> PKA Translate UDX function into CCA. 

GLYPH<SM590000> Verb Algorithm Currency. 

## CCA Version 6.3 improvements 5 

GLYPH<SM590000> Compliance support for: 

– All DES services 

– AES services 

– RSA services, including full use of X.509 certificates 

GLYPH<SM590000> TR-34 Remote Key Load 

