IBM 4764 User manual

4764 PCI-X Cryptographic Coprocessor
Installation Manual
򔻐򗗠򙳰

Note
Before using this information and the product it supports, read the information in “Safety and environmental notices” on page
ix and in “Notices,” on page 11.
Third Edition, September 2008
This edition describes installation of the IBM®4764 PCI-X Cryptographic Coprocessor.
IBM does not stock publications at the address given below. This and other publications related to the IBM 4764
Cryptographic Coprocessor can be obtained in PDF format from www.ibm.com/security/cryptocards.
Readers’ comments can be communicated to IBM by using the support link on the product Web site at
http://www.ibm.com/security/cryptocards, or by sending aletter to:
IBM Corporation
Department VM9A, MG81
Security Solutions and Technology
8501 IBM Drive
Charlotte, NC 28262-8563 USA
When you send information to IBM, you grant IBM anonexclusive right to use or distribute the information in any
way it believes appropriate without incurring any obligation to you.
©Copyright International Business Machines Corporation 2005, 2008. All rights reserved.
US Government Users Restricted Rights -Use, duplication or disclosure restricted by GSA ADP Schedule Contract
with IBM Corp.

Contents
Figures ....................................v
Tables .................................... vii
Safety and environmental notices ..........................ix
Safety notices ..................................ix
World trade safety information ............................x
Environmental notices ...............................xi
Product recycling and disposal ...........................xi
Battery return program............................... xii
IBM cryptographic coprocessor card return program.................... xiii
About this manual................................xv
How this manual is organized ............................xv
Where to find more information ...........................xv
Chapter 1. Introduction ..............................1
Contents of the coprocessor package .........................1
Special considerations for handling and storage......................1
Temperature ..................................1
Batteries ...................................1
Requirements and specifications ...........................2
Hardware requirement ..............................2
Software requirement ..............................2
Power requirement ...............................2
Environmental specifications ............................2
Physical dimensions ...............................2
Chapter 2. Installing the coprocessor.........................3
Chapter 3. Replacing IBM PCI-X cryptographic coprocessor batteries ............7
Appendix. Notices ................................11
Trademarks ..................................12
Electronic emissions ...............................12
Federal Communications Commission (FCC) statement .................12
Industry Canada compliance statement .......................13
Avis de conformité aux normes d’Industrie Canada ...................13
Japanese Voluntary Control Council for Interference (VCCI) statement ............13
Glossary ...................................15
Index .....................................17
iii

iv 4764 PCI-X Cryptographic Coprocessor Installation Manual

Figures
1. Jumpers on the PCI-X cryptographic coprocessor (front side) ...............4
2. Jumpers on the PCI-X cryptographic coprocessor (back side) ...............5
3. J10 connector and battery locations on the PCI-X cryptographic coprocessor .........9
v

vi 4764 PCI-X Cryptographic Coprocessor Installation Manual

Tables
1. Operating, storage, and shipping specifications ....................2
2. Jumpers on the PCI-X cryptographic coprocessor ...................5
vii

viii 4764 PCI-X Cryptographic Coprocessor Installation Manual

Safety and environmental notices
Safety notices
Safety notices may be printed throughout this guide. DANGER notices warn you of conditions or
procedures that can result in death or severe personal injury. CAUTION notices warn you of conditions or
procedures that can cause personal injury that is neither lethal nor extremely hazardous. Attention notices
warn you of conditions or procedures that can cause damage to machines, equipment, or programs. The
following DANGER notice appears in this manual:
DANGER
Electrical voltage and current from power, telephone, and communication cables are hazardous.
To avoid ashock hazard:
vDo not connect or disconnect any cables or perform installation, maintenance, or
reconfiguration of this product during an electrical storm.
vConnect all power cords to aproperly wired and grounded electrical outlet. Ensure outlet
supplies proper voltage and phase rotation according to the system rating plate.
vConnect any equipment that will be attached to this product to properly wired outlets.
vWhen possible, use one hand only to connect or disconnect signal cables.
vNever turn on any equipment when there is evidence of fire, water, or structural damage.
vDisconnect the attached power cords, telecommunications systems, networks, and modems
before you open the device covers, unless instructed otherwise in the installation and
configuration procedures.
vConnect and disconnect cables as described below when installing, moving, or opening
covers on this product or attached devices.
To Disconnect:
1. Turn everything OFF (unless instructed otherwise).
2. Remove power cords from the outlet.
3. Remove signal cables from connectors.
4. Remove all cables from devices.
To Connect:
1. Turn everything OFF (unless instructed otherwise)
2. Attach all cables to devices.
3. Attach signal cables to connectors.
4. Attach power cords to outlet.
5. Turn device ON.
(D005)
ix

The following CAUTION notice appears in this manual:
CAUTION:
Only trained service personnel may replace this battery. The battery contains lithium. To avoid
possible explosion, do not burn or charge the battery.
Do Not:
__ Throw or immerse into water
__ Heat to more than 100°C (212°F)
__ Repair or disassemble
Exchange only with the IBM-approved part. Recycle or discard the battery as instructed by local
regulations. In the United States, IBM has aprocess for the collection of this battery. For
information, call 1-800-426-4333. Have the IBM part number for the battery unit available when you
call. (C002)
World trade safety information
Several countries require the safety information contained in product publications to be presented in their
national languages. If this requirement applies to your country, asafety information booklet is included in
the publications package shipped with the product. The booklet contains the safety information in your
national language with references to the US English source. Before using aUS English publication to
install, operate, or service this IBM product, you must first become familiar with the related safety
information in the booklet. You should also refer to the booklet any time you do not clearly understand any
safety information in the US English publications.
x4764 PCI-X Cryptographic Coprocessor Installation Manual

Environmental notices
Product recycling and disposal
This unit must be recycled or discarded according to applicable local and national regulations. IBM
encourages owners of information technology (IT) equipment to responsibly recycle their equipment when
it is no longer needed. IBM offers avariety of product return programs and services in several countries to
assist equipment owners in recycling their IT products. Information on IBM product recycling offerings can
be found on IBM’s Internet site at:
http://www.ibm.com/ibm/environment/products/index.shtml.
Esta unidad debe reciclarse odesecharse de acuerdo con lo establecido en la normativa nacional olocal
aplicable. IBM alos propietarios de equipos de tecnología de la información (TI) que reciclen
responsablemente sus equipos cuando éstrecomiendaos ya no les sean útiles. IBM dispone de una serie
de programas yservicios de devolución de productos en varios países, afin de ayudar alos propietarios
de equipos areciclar sus productos de TI. Se puede encontrar información sobre las ofertas de reciclado
de productos de IBM en el sitio web de IBM
http://www.ibm.com/ibm/environment/products/index.shtml.
Notice: This mark applies only to countries within the European Union (EU) and Norway.
Appliances are labeled in accordance with European Directive 2002/96/EC concerning waste electrical and
electronic equipment (WEEE). The Directive determines the framework for the return and recycling of used
appliances as applicable throughout the European Union. This label is applied to various products to
indicate that the product is not to be thrown away, but rather reclaimed upon end of life per this Directive.
In accordance with the European WEEE Directive, electrical and electronic equipment (EEE) is to be
collected separately and to be reused, recycled, or recovered at end of life. Users of EEE with the WEEE
marking per Annex IV of the WEEE Directive, as shown above, must not dispose of end of life EEE as
unsorted municipal waste, but use the collection framework available to customers for the return, recycling,
and recovery of WEEE. Customer participation is important to minimize any potential effects of EEE on the
environment and human health due to the potential presence of hazardous substances in EEE. For proper
collection and treatment, contact your local IBM representative.
For the European Union:
Safety and environmental notices xi
|
|
|
|
|
|
|
|

Battery return program
This product may contain sealed lead acid, nickel cadmium, nickel metal hydride, lithium, or lithium ion
battery(s). Consult your user manual or service manual for specific battery information. The battery must
be recycled or disposed of properly. Recycling facilities may not be available in your area. For information
on disposal of batteries outside the United States, go to http://www.ibm.com/ibm/environment/products/
index.shtml or contact your local waste disposal facility.
In the United States, IBM has established areturn process for reuse, recycling, or proper disposal of used
IBM sealed lead acid, nickel cadmium, nickel metal hydride, and other battery packs from IBM Equipment.
For information on proper disposal of these batteries, contact IBM at 1-800-426-4333. Please have the
IBM part number listed on the battery available prior to your call.
In Taiwan, the following applies:
Please recycle batteries
Notice: This mark applies only to countries within the European Union (EU) and Norway.
Batteries or packaging for batteries are labeled in accordance with European Directive 2006/66/EC
concerning batteries and accumulators and waste batteries and accumulators. The Directive determines
the framework for the return and recycling of used batteries and accumulators as applicable throughout the
European Union. This label is applied to various batteries to indicate that the battery is not to be thrown
away, but rather reclaimed upon end of life per this Directive.
xii 4764 PCI-X Cryptographic Coprocessor Installation Manual
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

Les batteries ou emballages pour batteries sont étiquetés conformément aux direc-
tives européennes 2006/66/EC, norme relative aux batteries et accumulateurs en
usage et aux batteries et accumulateurs usés. Les directives déterminent la marche
à suivre en vigueur dans l'Union Européenne pour le retour et le recyclage des batte-
ries et accumulateurs usés. Cette étiquette est appliquée sur diverses batteries pour
indiquer que la batterie ne doit pas être mise au rebut mais plutôt récupérée en fin
de cycle de vie selon cette norme.
In accordance with the European Directive 2006/66/EC, batteries and accumulators are labeled to indicate
that they are to be collected separately and recycled at end of life. The label on the battery may also
include achemical symbol for the metal concerned in the battery (Pb for lead, Hg for mercury and Cd for
cadmium). Users of batteries and accumulators must not dispose of batteries and accumulators as
unsorted municipal waste, but use the collection framework available to customers for the return, recycling
and treatment of batteries and accumulators. Customer participation is important to minimize any potential
effects of batteries and accumulators on the environment and human health due to the potential presence
of hazardous substances. For proper collection and treatment, contact your local IBM representative.
For California:
Perchlorate Material -special handling may apply.
See http://www.dtsc.ca.gov/hazardouswaste/perchlorate.
The foregoing notice is provided in accordance with California Code of Regulations Title 22, Division 4.5
Chapter 33. Best Management Practices for Perchlorate Materials. This product, part or both may include
alithium manganese dioxide battery which contains aperchlorate substance
IBM cryptographic coprocessor card return program
This machine may contain an optional feature, the cryptographic coprocessor card, which includes a
polyurethane material that contains mercury. Please follow Local Ordinances or regulations for disposal of
this card. IBM has established areturn program for certain IBM Cryptographic Coprocessor Cards. More
information can be found at http://www.ibm.com/ibm/environment/products/prp.shtml..
Safety and environmental notices xiii
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|

xiv 4764 PCI-X Cryptographic Coprocessor Installation Manual

About this manual
The IBM 4764 PCI-X Cryptographic Coprocessor Installation Manual is written for personnel installing the
IBM 4764 PCI-X Cryptographic Coprocessor hardware.
How this manual is organized
This manual is organized as follows:
v“Safety and environmental notices” on page ix describes important general safety information.
vChapter 1, “Introduction,” describes the contents of the coprocessor packages; shipping, handling, and
storage considerations; and requirements and specifications of the PCI-X cryptographic coprocessor.
vChapter 2, “Installing the coprocessor,” describes the procedure to physically install the PCI-X
cryptographic coprocessor.
vChapter 3, “Replacing IBM PCI-X cryptographic coprocessor batteries,” describes the way to replace the
batteries on the PCI-X cryptographic coprocessor.
v“Notices” contains notices for various countries, trademark information, and information about the
product warranty extended by IBM.
Aglossary and an index complete the manual.
Where to find more information
Visit the IBM product Web site at http://www.ibm.com/security/cryptocards to obtain IBM 4764-related
publications. This and other publications are available as Adobe PDF files that you can read and print with
the Adobe Acrobat Reader.
Before installing acoprocessor, check the IBM product Web site, http://www.ibm.com/security/cryptocards,
for the approved server list.
xv
|
|

xvi 4764 PCI-X Cryptographic Coprocessor Installation Manual

Chapter 1. Introduction
This section details the contents of the coprocessor package and describes the following information:
vSpecial considerations for handling and storage
vRequirements and specifications
The IBM 4764 PCI-X Cryptographic Coprocessor uses dedicated hardware to process cryptographic keys,
certificates, and bulk data. These cryptographic functions are performed within atamper-resistant module
that is designed to meet the FIPS PUB 140-2 Level 4standard of detecting and responding to
unauthorized attempts at physical access and security compromise due to environmental conditions such
as voltage and temperature.
You can install the coprocessor, astandard height, short-type PCI-X adapter card, only in an IBM
eServer™xSeries®approved server with aPCI-X expansion slot available.
Before installing acoprocessor, check the IBM product Web site, http://www.ibm.com/security/cryptocards,
for the approved server list.
Contents of the coprocessor package
Your package includes the following items:
vThe IBM 4764 PCI-X Cryptographic Coprocessor
vSafety Notices,GC28-6849
vStatement of Limited Warranty,GC28-6850
vLicense Agreement for Machine Code,GC28-6851
If any item is missing or damaged, contact your local IBM representative or your IBM Business Partner.
Special considerations for handling and storage
Each IBM 4764 PCI-X Cryptographic Coprocessor is shipped from the factory with acertified device key.
This electronic key, which is stored in the card’s battery-backed protected memory, digitally signs test
messages to confirm that the PCI-X cryptographic coprocessor is genuine and that no tampering has
occurred.
Note: If any of the secure module’s tamper sensors is triggered by tampering or accident, the coprocessor
erases (zeroizes) all data in the protected memory, destroying the device key. The PCI-X
cryptographic coprocessor cannot operate without the device key. To protect the key, follow these
guidelines:
Temperature
Do not expose the coprocessor to temperatures below −15 degrees C(+5 degrees F) or temperatures
above +60 degrees C(+140 degrees F).
Batteries
Do not remove battery power from the coprocessor. Data in the protected memory is lost when battery
power is removed. For information about replacing the batteries without erasing the protected memory, see
Chapter 3, “Replacing IBM PCI-X cryptographic coprocessor batteries.”
1
|
|
|

Requirements and specifications
Hardware requirement
The coprocessor must be installed in an IBM eServer xSeries approved server with aPCI-X (Version
1.0) bus slot available. No additional hardware or cabling is required.
Notes:
1. The 9-pin D-shell port is for development use only. It is not intended for customer use.
2. The ethernet port is blocked. It is not intended for customer use.
Software requirement
The coprocessor requires support software, for example, the IBM 4764 CCA Support Program, for both
the host machine and for its internal firmware. Operating system support is determined by the support
software.
This publication does not discuss the installation of support software. For information about the latest
software features available, visit the product Web site at http://www.ibm.com/security/cryptocards.
Power requirement
The power requirement for the IBM 4764-001 PCI-X Cryptographic Coprocessor is:
vVoltage supply: 3.3V, ±10 percent
vTotal power requirement: 12.50 watts maximum
Environmental specifications
The environmental specifications for the IBM 4764-001 PCI-X Cryptographic Coprocessor are shown in
Table 1.
Table 1. Operating, storage, and shipping specifications
Operating environment Storage environment Shipping environment
Temperature +10° C-+40° C
(+50° F-+104° F)
+1° C-+60° C
(+33.8° F-+140° F)
-15° C-+60° C
(+5° F-+140° F)
Relative humidity 8-80% 5-80% 5-100%
Wet bulb +27° C(+80.6° F) +29° C(+84.2° F) +29° C(+84.2° F)
Pressure (minimum) 768 mbar 700 mbar 550 mbar
Physical dimensions
The coprocessor is astandard height, short-type PCI-X adapter card
4.2 in. by 6.9 in. (107mm by 175mm).
24764 PCI-X Cryptographic Coprocessor Installation Manual
|
|
|
|
|
|

Chapter 2. Installing the coprocessor
This section describes installing the IBM 4764 PCI-X Cryptographic Coprocessor.
Note: Install the software before installing acoprocessor.
To install the coprocessor into the host computer, follow these steps:
1. Locate your computer’s instructions for installing expansion cards. Throughout this procedure, follow
the safety instructions in that manual.
2. Turn OFF the computer and all attached devices.
3. Disconnect all cables, including the power cable.
DANGER
Electrical voltage and current from power, telephone, and communication cables are
hazardous.
To avoid ashock hazard:
vDo not connect or disconnect any cables or perform installation, maintenance, or
reconfiguration of this product during an electrical storm.
vConnect all power cords to aproperly wired and grounded electrical outlet. Ensure outlet
supplies proper voltage and phase rotation according to the system rating plate.
vConnect any equipment that will be attached to this product to properly wired outlets.
vWhen possible, use one hand only to connect or disconnect signal cables.
vNever turn on any equipment when there is evidence of fire, water, or structural damage.
vDisconnect the attached power cords, telecommunications systems, networks, and
modems before you open the device covers, unless instructed otherwise in the
installation and configuration procedures.
vConnect and disconnect cables as described below when installing, moving, or opening
covers on this product or attached devices.
To Disconnect:
a. Turn everything OFF (unless instructed otherwise).
b. Remove power cords from the outlet.
c. Remove signal cables from connectors.
d. Remove all cables from devices.
To Connect:
a. Turn everything OFF (unless instructed otherwise)
b. Attach all cables to devices.
c. Attach signal cables to connectors.
d. Attach power cords to outlet.
e. Turn device ON.
(D005)
4. Remove the cover from the expansion slots according to the directions provided with your computer.
5. Choose aPCI-X expansion slot able to accommodate astandard short-type adapter card.
6. If the expansion slot has an individual cover, remove the bracket-holding screw and the cover.
Attention: Electrostatic discharge (ESD) can damage the card and its components. Wear an ESD
wrist-strap while handling and installing the card, or take the following precautions:
3
|

vLimit your movements; this helps prevent static electricity building up around you.
vPrevent others from touching the card or other components.
vBefore removing the card from the anti-static bag, touch the bag to an unpainted metal surface on
your computer and hold it there for at least two seconds.
vHandle the card by its edges only. Do not touch exposed circuitry and components.
7. Remove the PCI-X cryptographic coprocessor from its static-protective bag.
8. Verify that the jumpers on the card are positioned correctly; see Table 2on page 5.
R
S
2
3
2
Eth
net
BT2
BT1
Secure Crypto Module
Front Side
J7
J9
J8
J10
Figure 1. Jumpers on the PCI-X cryptographic coprocessor (front side)
44764 PCI-X Cryptographic Coprocessor Installation Manual