Library overview
IBM® provides technical documentation with a
consolidated view of z/Architecture® specific
concepts, tool descriptions, and reference information for Linux® on IBM Z® and LinuxONE .
Device Drivers, Features, and Commands
Learn about the device drivers, commands, and parameters that are available for Linux on IBM Z to configure and control mainframe devices and attachments.
Using the Dump Tools
You can set up kdump, a stand-alone dump tool, or VMDUMP to create a kernel dump of Linux on IBM Z .
How to use FC-attached SCSI devices with Linux on System z
Learn how to configure, operate, and troubleshoot Linux on IBM Z attached to a SAN environment.
Networking with RoCE Express
Learn what RoCE Express adapters offer for network connections of Linux on IBM Z or LinuxONE .
KVM Virtual Server Management
Learn how to set up, configure, and operate Linux on KVM instances and their virtual devices running on a KVM host on IBM Z or IBM LinuxONE hardware.
Configuring Crypto Express Adapters for KVM Guests
KVM guests can use Crypto Express Adapters.
Introducing IBM Secure Execution for Linux
This publication introduces secure execution. It describes the components of secure execution, explains how it works, and contains a detailed description of the tasks needed to work with secure execution. Secure execution is supported as of z15®.
Secure boot for Linux on IBM Z and IBM LinuxONE
This publication describes the use of secure boot on Linux on IBM Z and IBM LinuxONE. Learn about benefits of secure boot, how to set up a Linux instance to use secure boot, how to manage certificates, and how to sign boot files and modules with your private signing keys. Secure boot is supported as of z15.
Pervasive Encryption for Data Volumes
Use the pervasive encryption infrastructure to set up encrypted data volumes on IBM Z or IBM LinuxONE .
Enterprise Key Management for Pervasive Encryption of Data Volumes
Learn how to integrate the keys used for pervasive encryption in the EKMF Web enterprise key management system by using the zkey utility in a Linux instance on IBM Z or IBM LinuxONE .
Getting started with pervasive disk encryption
Learn how to set up encrypted data volumes on IBM Z or IBM LinuxONE .
openCryptoki - An Open Source Implementation of PKCS #11
This document provides information on how to configure openCryptoki and how to write PKCS #11 programs that exploit the provided cryptographic services.
OpenSSL support for IBM Z and IBM LinuxONE
This publication describes how OpenSSL can benefit from the performance acceleration and high security of cryptographic hardware with Linux on IBM Z and LinuxONE.
Secure Key Solution with the Common Cryptographic Architecture Application Programmer's Guide
Use the verbs of the Common Cryptographic Architecture (CCA) APIs for Linux on IBM Z to perform cryptographic operations with an IBM PCIe Cryptographic Coprocessor.
Exploiting Enterprise PKCS #11 using openCryptoki
Applications that are using a PKCS #11 API can take advantage of secure key cryptography using the Enterprise PKCS #11 (EP11) coprocessor mode of IBM Z cryptographic adapters.
libzpc - A Protected-Key Cryptographic Library
The libzpc cryptographic library provides APIs for protected key cryptography in the CPACF. You can either directly generate a random protected key or you can generate a secure key/protected key pair for permanent use of protected key cryptography across restart cycles of an LPAR, KVM virtual server, or z/VM® guest virtual machine.
libica Programmer's Reference
Use the Library for IBM Cryptographic Architecture (libica) to write cryptographic applications on IBM Z or IBM LinuxONE , both with and without cryptographic hardware.
Troubleshooting Guide
Find checklists for troubleshooting Linux on IBM Z , descriptions of tools that you can use for particular problems, and instructions for how to contact IBM support and transfer log files.
Kernel Messages
If your distribution includes message number support, IBM Z specific kernel messages are issued with a message number.
How to Improve Performance with PAV
You can set up DASD volumes as parallel access volumes (PAV) or for HyperPAV in z/VM or LPAR and then use PAV from Linux.
How to Set up a Terminal Server Environment
You can use IUCV connections within a virtual Linux server farm on z/VM to access terminal devices on Linux instances.