Security and Linux on z SystemsThis IBM® RedpaperTM publication discusses security practices for running Linux on z Systems on the IBM z14. It examines the unique security and integrity features that the IBM Z platform brings to the enterprise. It also examines pervasive encryption and its role in protecting data at rest. |
Common terms and phrases
3DES 3DES CFB accelerator algorithms applications block device boot bytes CEX6C ciphers command CP Assist Crypto Express features Crypto functions cryptographic adapter cryptographic coprocessors cryptographic functions cryptographic hardware cryptsetup data in flight dev/dasdb1 device driver device mapper disk partition dm-crypt Dynamic engine loading ENC CRYPT DEC encrypt data encryption of data etc/pki/tls/openssl.cnf file system FIPS mode firmware full disk encryption grep hardware cryptographic hardware security modules Hardware-accelerated IBM Secure Service IBM Z hardware icastats implementation in-flight and at-rest in-kernel cryptography installed kernel parameter libica Linux kernel Linux on IBM LinuxONE Systems logical partition LPAR lszcrypt master key OpenSSL OpenSSL configuration file operating systems package passphrase PCI Express Pervasive encryption processor protect data provides queues random number Redbooks root root root@itsoln1 dev root@itsoln1 iso Secure Service Container servers Service Container partition shown in Example software appliances trademarks verify virtual machine yes no 3DES z/VM