1. IBM LinuxONE™ Emperor II Technical Overview
9/12/2017
IBM LinuxONE™ Emperor II Technical Overview
Your name
Your business title
Your address
September 12, 2017
Provide your name, business title, address, and the date of your presentation on the title slide

2. Emperor II Technical Overview
9/12/2017
Topics for Today
IBM LinuxONE Emperor™ II Key Messages & Value Propositions
IBM LinuxONE Emperor II System Overview
Processor improvements
Pause-less Garbage Collection
Pervasive Encryption
IBM Secure Service Container
Hypervisor & Operating System Support
Associated Availability Dates
These are the suggested topics to discuss today.

3. IBM LinuxONE Emperor II Key Messages and Value Propositions
Emperor II Technical Overview
9/12/2017
IBM LinuxONE Emperor II Key Messages and Value Propositions
Key messages:
Industry leading security without re-engineering, encrypting all in-flight and at-rest data
Accelerating the data that drives your business, unprecedented data serving performance
Scale that maps to your growth vision, flexible, granular, powerful scalability options
Value propositions
x86 data centers have a new, more secure alternative with the pervasive encryption of IBM LinuxONE Emperor II
Data serving at a new scale, with faster cores than x86, more cache-per-core, large memory (up to 32 TB) to support in-memory databases and analytics, and up to 832 GB/S total I/O bandwidth to let you run billions of transactions per day on a single Emperor II
Open & flexible – allowing you to mix commercial data serving & analytics with open source data serving & analytics on the same system without compromising SLAs or security
Enhanced Java affinity – Emperor II runs Java™ faster than x86 does, and has exclusive hardware-based Pause-Less Garbage Collection to provide more predictable and consistent response times for Java apps
These are the key messages we are telling the market, and the key value propositions for Emperor II. We are helping organizations to adopt encryption more broadly by encrypting all data, without needing to re-engineer your applications. Emperor II can process the data faster than alternative platforms, and Emperor II has unmatched scalability.

4. LinuxONE Emperor II System Overview
Emperor II Technical Overview
9/12/2017
LinuxONE Emperor II System Overview
<Details on the slide are self-explanatory>
IBM and BP Confidential – This material is for educational purpose only and is NOT customer ready.

5. Quick View of IBM LinuxONE Emperor II
Emperor II Technical Overview
9/12/2017
Quick View of IBM LinuxONE Emperor II
Physical organization is cores on chips, chips & memory in up to 4 CPC (Central Processor Complex) drawers, PCIe in I/O drawers, drawers in a cabinet, dual-cabinet system
Five models: LM1 (1 CPC 5-socket drawer), LM2 (2 CPC 5-socket drawers), LM3 (3 CPC 5-socket drawers), LM4 (4 CPC 5-socket drawers), LM5 (4 CPC 6-socket drawers)
Cores (Processor Units or PUs)
Can be either Integrated Facility for Linux cores (IFLs), System Assist Processors (SAPs), an Integrated Firmware Processor (IFP), or spares
5.2 GHz, in-core crypto & compression, SMT-2
41 PUs per processor drawer on models LM1-LM4; LM5 has 49 PUs per drawer
5 cores per drawer are reserved as SAPs (+3 more on LM5), which assist with disk I/O operations
Remaining 36 cores can be configured as any mix of IFLs, SAPs, and spares
1 core/system is reserved as the IFP, which assists with PCIe operations for RoCE and zEDC
2 core/system are reserved as spares
The mandatory 2 spares and the IFP are allocated in the 1st drawer, leaving up to 33 IFLs in LM1
Max Linux cores per model: 33 (36 - IFP & 2 spares), 69 (33+36), 105 (69+36), 141 (105+36), 170
1 optional CP available solely to support the GDPS Virtual Appliance
Up to 85 LPARs (Logical Partitions or “Hard Partitions” as viewed by licensed software)
Memory
High availability Redundant Array of Independent Memory (RAIM)
Minimum of 64 GB user memory GB Hardware System Area (HSA) = 256 GB system minimum
Maximum of up to 8 TB/drawer, 32 TB total for System; up to 16 TB per LPAR (OS/hypervisor dependent)
I/O
A single System Control chip serves each drawer by interconnecting the processor, memory and IO, providing 672MB of L4 cache accessible to all cores in the entire system
New FICON® (Fibre Connection), OSA (Open Systems Adapter), and RoCE (RDMA over Converged Ethernet) cards
16 GBps PCIe Gen 3 I/O interconnects
IBM LinuxONE Emperor II
Machine Type: 3906
Models:
LM1, LM2, LM3, LM4, LM5
Model
Max # of Linux Cores
Max Memory
LM5
170
32 TB
LM4
141
LM3
105
24 TB
LM2 69
16 TB
LM1 33
8 TB*
Here is a summary of the new Emperor II. Before the features and specifications, let me explain some basics and how the system is physically organized.
When you order your Emperor II system, you use its machine type (3906) and the model number you want (LM1, LM2, LM3, LM4 or LM5), as shown on the right-hand side of the slide.
The model numbers for LM1-LM4 correspond to the number of Central Processor Complex (CPC) drawers they contain, LM1 contains 1 CPC drawer, LM4 contains 4 CPC drawers. The number of CPC drawers determines the number of Linux cores and the amount of memory in the system. Each drawer contains Linux cores and up to 8 TB of memory. So, for example, if you only need 4 cores but need 10 TB of memory, then you will need two drawers, which is the LM2, and only “turn on” 4 of the available 69 Linux cores. The software will only see the 4 cores, and you won’t get charged for the cores you don’t turn on.
The model LM5 is like the LM4 but with LM5 CPC drawers, which contain an additional chip per drawer for a total of available 49 cores/drawer, and up to a total of 170 Linux cores in the system. The LM5 and the LM4 have the same maximum memory capacity of 32 TB.
You cannot upgrade to model LM5 from other models. If you will need more than 141 Linux cores in 3 years, we suggest you order an LM5.
The PUs (“cores”) are the same in all models LM1-LM5, and are the fastest commercial processors on the market at 5.2 GHz. Each core has its own in-core cryptographic and compression co-processor, the largest L1 & L2 cache on the market, and each can be configured or “characterized” to do any one of the following:
It can run Linux workloads – in which case it is called an “IFL” or “Integrated Facility for Linux” core; the system must have at least 1 IFL; the IFLs are the only cores visible to the operating systems or any core-based licensed software
It can assist the Linux cores by orchestrating disk I/O operations – in which case it is called a System Assist Processors or “SAP”; the system comes with 5 SAPs preconfigured per drawer. LM5 comes with 3 additional SAPs, for 23 total.
It can be an “IFP” or “Integrated Firmware Processor”, which offloads the Linux cores for PCIe operations (specifically RoCE and zEDC cards). there is only 1 IFP per system.
It can be a spare core – the system comes with 2 spare cores. Customers may allocate unassigned IFLs (“uIFLs”) as spares.
One (1) core per system can be characterized as a General Processor (GP) or Central Processor (CP) solely for use by the GDPS Virtual Appliance, which is an IBM-managed software appliance for providing high availability and disaster recovery (HA/DR).
Memory features
In the first CPC drawer, available addressable memory is reduced by 192 GB, which is taken by the Hardware System Area (HSA). HSA size is fixed, standard, and is included in the base price. It is not taken from customer purchased memory.
Slide 6 6

6. Emperor II Technical Overview
9/12/2017
System Design Changes
14 nm Processor with improved SIMD, SMT
10 Cores per CP SCM design
5 (on LM1-LM4) or 6 (on LM5) CP SCMs per Drawer
Integrated I/O with PCIe Direct Attach
Now only one System Controller (SC) chip per drawer
Simplified CPC Drawer SMP Fabric
Crypto Express6S
OSA-Express6S
FICON Express16S+
RoCE Express2
Radiator Design improvements
Expanded operating environment (ASHRAE Class A3)
IBM
LinuxONE
Emperor II
<Details on the slide are self-explanatory>

7. LinuxONE Emperor II – Highly Engineered System for Data Serving
Emperor II Technical Overview
9/12/2017
LinuxONE Emperor II – Highly Engineered System for Data Serving
Up to 170 Linux cores running at 5.2 GHz in an Emperor II (3906)
Plus up to 24 cores for offload system processing
Plus up to 4,480 dedicated I/O processors
Share up to 170 processors across up to 85 LPARS; plus minimum 2 spares LM1: 33 cores, 8 TB LM2: 69 cores, 16 TB LM3: 105 cores, 24 TB LM4: 141 cores, 32 TB LM5: 170 cores, 32 TB
System Assist Processors (SAPs) are multithreaded cores that orchestrate disk I/O on behalf of the Linux cores, and do not factor into software license core counts
1 Integrated Firmware Processor (IFP), which is used for RoCE Express and z EDC Express I/O cards.
These cores do not factor into software license core counts
Up to 320 pairs of PowerPC® cores across 160 I/O adapters, custom data-moving hardware & firmware, and a “swarm” (up to 3,840) of small lightweight processors that make the I/O channels fast and effective at moving I/O data to and from memory
Up to 320 pairs of PowerPC® cores and…
Up to 23 SAPs
1 IFP
Up to 320 dozens of programmable embedded engines performing I/O
System Assist Processors (SAPs) are processor units (PUs) that have been characterized to assist the other processors by executing internal code to provide to the I/O subsystem. An SAP, for example, translates device numbers and real addresses of channel path identifiers (CHPIDs), control unit addresses, and device numbers. It manages multiple paths to control units and performs error recovery for temporary errors.
Operating systems and applications cannot detect SAPs, and SAPs do not use any "normal" memory.
The Integrated firmware processor (IFP) is allocated from the pool of processor units (Pus) available for the whole System. Unlike other characterized PUs, the customer doesn’t pay for the IFP. It’s a single PU dedicated solely for the purpose of supporting the native PCIe features (10GbE RoCE Express and zEDC Express) and is initialized at POR if these features are present. It has two Resource Groups (RGs) which have firmware for the 10GbE RoCE Express and zEDC Express features –
The IFP is not a customer useable PU and not ‘visible’ to the customer. Acts exactly like any other PU during error or failover scenarios i.e., sparing. The integrated firmware processor (IFP) supports Resource Group (RG) Licensed Internal Code (LIC) to provide native PCIe I/O feature management and virtualization functions. This LIC is conceptually similar to the Channel Subsystem LIC that supports traditional System z I/O features.
Swarm = 12 Programmable Protocol Assist Engines per channel x 320 channels = 3840, which make a big difference for FCP
ASIC sits next to the industry standard is virtualized
Massive amount of I/O firmware. GPUs aren’t nearly as efficient for I/O operations. 8

8. Processor Improvements
Emperor II Technical Overview
9/12/2017
Processor Improvements
<Details on the slide are self-explanatory>
IBM and BP Confidential – This material is for educational purpose only and is NOT customer ready.

9. LinuxONE Processor Design Summary
Emperor II Technical Overview
9/12/2017
LinuxONE Processor Design Summary
Cache Improvements
New power efficient logical directory design
33% Larger L1 I$ cache (128K vs. 96K on Emperor I)
2x Larger L2 D$ cache (4MB vs. 2 MB on Emperor I)
2x Larger L3 cache (128MB vs. 64 MB on Emperor I) with symbol ECC
New Translation/TLB2 design
4 concurrent translations
Reduced latency
Lookup integrated into L2 access pipe
2x CRSTE growth
1.5X PTE growth
New 64 entry 2gig TLB2
Pipeline Optimizations
Improved instruction delivery
Faster branch wakeup
Reduced execution latency
Improved OSC* avoidance
Optimized 2nd generation SMT2
Better Branch Prediction
33% Larger Branch Target Buffer1 & BTB2
New Perceptron Predictor
New Simple Call Return Stack
*OSC - Operator Store Compare
CRSTE - Combined Region Segment Table Entry
PTE – Page Table Entry
672 MB L4 in the SC
Symbol ECC: An error correcting code capable of correcting clusters of bits (called symbols). Typically the symbol size correlates to a physical entity such as an array macro.
14nm SOI technology
17 layers of metal
6.1 billion transistors
10 cores per chip
5.2 GHz

10. LinuxONE Processor Design Improvements
Emperor II Technical Overview
9/12/2017
LinuxONE Processor Design Improvements
14nm SOI Technology
Up to 10 active cores (PUs) per chip
Performance Enhancements
Larger L1, L2, and L3 caches
New address translation design
Branch prediction innovations (Linux® aware)
Instruction pipeline optimizations
Increased floating-point compute bandwidth
2nd generation SMT (the SAPs can now use SMT)
Architecture features
SIMD extensions for decimal operations and analytics
Register-based BCD operations
Guarded Storage Facility
Enables pause-less garbage collection for Java
Instruction Execution Protection Facility
“No-execute” zones – help reduce impact of garbage collection
Crypto co-processor
There are several performance enhancements in the LinuxONE processors, and several enhanced architectural features.
System Control (SC) chip

11. Emperor II Technical Overview
9/12/2017
z14 Processor Enhancements: Guarded Storage Facility (GSF) for Pause-less Garbage Collection
Problem:
When garbage collection occurs today, all threads running under a JVM must stop
Customers are consolidating from multiple to single JVM environments to increase productivity and save money.
The consolidation effort generates heap sizes >100GB where garbage collection pauses can take minutes!
Long pause times cause transactional application failures and SLA violations.
Solution:
Define flexible new architecture that provides hardware assisted read barriers for guarded storage involved in a garbage collection/compaction event.
Whenever a Pointer is loaded from memory, the pointer is checked against a pending GC, and in case of a “hit”, the control flow is redirected
The Dynamic Runtime can then assist in GC-ing the pointed-to object, before resuming the SW thread.
Software exploitation of fast hardware barrier detection and acceleration will allow application threads to run concurrently during the majority of garbage collection events
Impact:
Reduces worst case latency impacts for critical applications like financial trading platforms
Maintains SLAs, and keeps IBM Z® servers in our customers modernization roadmaps.
<Details on the slide are self-explanatory>

12. Pause-less Garbage Collection
Emperor II Technical Overview
9/12/2017
Pause-less Garbage Collection
Normal GC pause
GC is the reclaiming of memory that is no longer used programs
Normal GC pauses all threads while it does its work
Pause-less GC allows Java GC to run alongside with applications, which means response times are more predictable
Pause-less GC also helps ensure high-performance when transaction processing reaches high volumes
Java Garbage Collection - Tuning made easy
Up to 3x better throughput for response time-constrained Service Level Agreements (SLAs)
Up to 10x better average GC pause times
Pause-less GC
Garbage collection (GC) is a form of automatic memory management, first introduced with the Lisp programming language in The garbage collector, or just collector, attempts to reclaim garbage, or memory occupied by objects that are no longer in use by the program. GC is typically used by higher-level programming languages, like BASIC, Smalltalk, Java, JavaScript, Ruby and Julia (and Microsoft .NET). Languages like C, C++, Objective C, Delphi, Perl, and PHP do not use GC (although there can be add-ons to perform GC).
IBM Java 8 SR5 + IBM LinuxONE™ Guarded Storage Facility allows GC to run in parallel with application.
Enable with: -Xgc:concurrentScavenge

13. Co-processor Compression (CMPSC) Improvements
Emperor II Technical Overview
9/12/2017
Co-processor Compression (CMPSC) Improvements
Dedicated Co-Processor per Core
With small, dedicated dictionary cache
Connects to main cache-structure (better throughput for many dictionaries)
Huffman compression on top of CMPSC compression (Embedded in existing dictionary, reuse of generators)
z196
zEC12
z13
z14
Co-Processor
Compression
Expansion
Translation
New compression algorithm (fully pipelined, ~2x faster)
Order Preserving compression in B-Trees and other index structures
Faster expansion algorithms
Reduced overhead on short data
<Details on the slide are self-explanatory>
Compression/Expansion Strategy (IBM z14™ and beyond)
Improved compression/expansion performance, in particular reduced overhead for short compression  disk/memory savings by exploiting more compression with low CPU consumption
Improved compression ratio (e.g. Huffman coding in z14)  additional disk/memory savings even where compression is already in use today
Order-preserving compression for search trees, sort files, etc.  disk/memory savings for large parts of data that have not been practical to compress previously

14. Compression Coprocessor (CMPSC) vs. zEDC
Emperor II Technical Overview
9/12/2017
Compression Coprocessor (CMPSC) vs. zEDC
Using the right hardware compression acceleration for each of your workloads
Compression Coprocessor
z Enterprise Data Compression
On Chip
In every IBM Z server
Mature: Decades of use by Access Methods and Db2®
Work is performed jointly by CPU and Coprocessor
Proprietary Compression Format
PCIe Adapter
Introduced with IBM zEnterprise® EC12 GA2 and IBM zEnterprise BC12
Mature: Industry Standard with decades of software support
Work is performed by the PCIe Adapter
Standards Compliant (RFC1951)
Small object compression
Rows in a database
Large Sequential Data
QSAM/BSAM Online Sequential Data
Objects stored in a data base
Industry Standard Data
Cross Platform Data Exchange
Users
VSAM for better disk utilization
Db2 for lower memory usage
The majority of customers are currently compressing their Db2 rows
QSAM/BSAM for better disk utilization and batch elapsed time improvements
SMF for increased availability and online storage reduction
Java for high throughput standard compression via java.util.zip
Encryption Facility for z/OS for better industry data exchange
IBM Sterling Connect:Direct® for z/OS® for better throughput and link utilization
ISV support for increased client value
Use Cases
<Details on the slide are self-explanatory>

15. IBM Offers Multiple Compression Technologies for the Mainframe
Emperor II Technical Overview
9/12/2017
IBM Offers Multiple Compression Technologies for the Mainframe
Type
Optimized for:
Performance Overhead
Supported data
Frequency of access post compression
CMPSC compression on IBM Z processor chip
Optimal for Db2 or select DFSMS™ files
On Chip, relatively little CPU overhead and less I/O, Fast
Db2 - Optimized for row-wise access to data is required
DFSMS files – for VSAM and non-VSAM extended format data sets
Often
Other software compression (zlib, or similar)
Most compression uses industry std today. Used by many file types
Higher CPU - software instructions executed. Note: if Java then eligible for zIIP (or zAAP)
Any. De facto standard for almost any type of data.
Tape HW compression
Tape compression –optimized for use with large files, archival purposes
Performed by the tape subsystem
Any.
Often – Rare (application dependent)
Archival / Backup
Archive data and data to backup/copy
CPU overhead, longer wall clock time
DFSMShsm™, DFSMSdss™
Real time compression
IBM NAS storage
No performance degradation
SVC
Designed for active primary data.
zEDC Express
Active, for cross platform data exchange. Enables compression of active and inactive data
Processing on zEDC Express-expect minimal CPU overhead, low latency
SMF though logger
zlib compatible
Java
BSAM/QSAM Extended format
SOD DFSMShsm /dss
Encryption Facility
Frequent access required. Useful for files that previously used software compression as well
<Details on the slide are self-explanatory>

16. SIMD exploitation on LinuxONE
Emperor II Technical Overview
9/12/2017
SIMD exploitation on LinuxONE
Linux Kernel support
Enable vector facility for user space applications
Handle vector registers across context switch etc.
Compiler & Toolchain support
Enable application exploitation of vector facility
Hand-optimized assembler code
C/C++ language extension (vector types, operators, intrinsics)
Automatic vectorization by the compiler
binutils, gcc, llvm, clang, gdb, IBM XL C/C++ compiler, Java 8
Optimized libraries (string, math routines)
IBM provided ATLAS & MASS libs, glibc
Application support building up
KVM for guests exploitation
z/VM PTFs
RHEL 7.2 & later
SLES 12 SP1 & later
Ubuntu & later
Java 8 SR1 needed
No exploitation in Java 7
Instruction pool
Data pool
Results
<Details on the slide are self-explanatory>

17. LinuxONE Processor Design Improvements
Emperor II Technical Overview
9/12/2017
LinuxONE Processor Design Improvements
Performance Enhancements
Architecture features
Crypto co-processor
True Random Number generator
Support for SHA3 standard
RSA/ECC acceleration for asymmetric encryption
GCM (Galois Counter Mode) acceleration for symmetric encryption
Faster encryption and decryption
2X faster for most usage of AES
6X faster for GCM
14nm SOI Technology
Up to 10 active cores (PUs) per chip
Galois (“gal-wah”) Counter Mode - a mode of operation for symmetric key cryptographic block ciphers that has been widely adopted because of its efficiency and performance
System Control (SC) chip

18. LinuxONE Emperor II Encryption
Emperor II Technical Overview
9/12/2017
LinuxONE Emperor II Encryption
<Details on the slide are self-explanatory>
IBM and BP Confidential – This material is for educational purpose only and is NOT customer ready.

19. IBM LinuxONE Emperor II – Creating Leadership for Digital Trust
Emperor II Technical Overview
9/12/2017
IBM LinuxONE Emperor II – Creating Leadership for Digital Trust
Designed with pervasive encryption for piece of mind that data and privacy is always protected
Designed with improvements in speed, efficiency and access improvements to both serve up data to build services and new offerings and to perform analytics and insight on the data because this is where it resides
Designed to be open and industry standard to bridge the skills gap and make the infrastructure easier to manage
IBM
LinuxONE
Emperor II
Designed with pervasive encryption for piece of mind that data and privacy is always protected
Designed with improvements in speed, efficiency and access improvements to both serve up data to build services and new offerings and to perform analytics and insight on the data because this is where it resides
Designed to be open and industry standard to bridge the skills gap and make the infrastructure easier to manage

20. Crypto Functions in the Dedicated Co-processor – new for z14
Emperor II Technical Overview
9/12/2017
Crypto Functions in the Dedicated Co-processor – new for z14
Dedicated Co-Processor per Core
~2x throughput
SHA-1/2 ~3.7x better throughput (on longer data)
AES-128/256 ~1.7x better throughput (on longer data)
Reduced overhead on short data (hashing and encryption)
>4x throughput for AES
Special instructions for elliptic curve crypto / RSA
z196
zEC12
z13
z14
Co-Processor
Hashing hardware: SHA-1/256/512, GHASH
Cipher hardware: (3)DES, AES
Pseudo-random number generator
New hashing algorithms, e.g. SHA-3
Support for authenticated encryption (combined encryption and hashing, e.g. AES-GCM)
True random number generator (e.g. for session keys)
<Details on the slide are self-explanatory>
New instruction added : KMGCM for end to end implementation of NIST GCM standard. (800-38D)
KIMD / KLMD extended to implement SHA-3 standard. (FIPS 202)
AES throughput improved to 3.5 to 4B/cycle

21. Emperor II Technical Overview
9/12/2017
Pervasive Encryption with IBM LinuxONE Emperor II Enabled through tight platform integration
Full Disk Encryption
Full disk encryption utilizes encrypting disk drives that protect data at rest when disk drives are retired, sent for repair or repurposed
Integrated Crypto Hardware
Hardware accelerated encryption on every core – CPACF
PCIe Hardware Security Module (HSM) & Cryptographic Coprocessor – Crypto Express
Network Encryption
Protect network traffic using standards based encryption from end to end to ensure that Linux systems meet approved encryption criteria
File System Encryption
Protect Linux file systems using policy controlled encryption that is transparent to applications and databases
<Details on the slide are self-explanatory>
Secure Service Container
Secure deployment of software appliances including tamper protection during installation and runtime, restricted administrator access, and encryption of data and code in-flight and at-rest

22. Data Protection – LinuxONE File Encryption
Emperor II Technical Overview
9/12/2017
Data Protection – LinuxONE File Encryption
Protection of data at-rest
Value Proposition:
Integration of hardware-accelerated crypto into the system’s standard components gives you wide reach into solutions
Storage System
Network
LinuxONE
SAN
DB server
block device encryption
***
***
abc
CPACF
Focus on Transparent Enablement:
Transparent data encryption optimized with LinuxONE CPACF hardware performance gains
Leverage industry-unique CPACF encryption which prevents raw key material from being visible to OS and applications.
<Details on the slide are self-explanatory>
dm-crypt enhancements have been submitted upstream to Linux distros for CPACF protected-key

23. Data Protection – LinuxONE Network Security
Emperor II Technical Overview
9/12/2017
Data Protection – LinuxONE Network Security
CPACF
SAN
Network
Storage System
LinuxONE/Linux on z
Open SSL, Java, or GSKIT
abc
App
***
Protection of data in-flight
Focus on Transparent Enablement:
Transparently accelerate TLS & IPSec using CPACF & SIMD to leverage hardware performance gains
<Details on the slide are self-explanatory>
Client Value Proposition:
Not organizations use host-based network encryption today… reduced cost of encryption enables broad use of network encryption
Status: dm-crypt enhancements for CPACF protected-key submitted upstream

24. Data Protection – z/VM Encrypted Paging
Emperor II Technical Overview
9/12/2017
Data Protection – z/VM Encrypted Paging
z/VM 6.4
***
***
SSI
z/VM™
z/VM
xyz
CPACF
def
CPACF
Encrypted Paging
Threat: access to sensitive data when stored on CP owned disk
Solution: encrypt guest data on page-out.
Notes:
Paging is not SSI-relevant
Paging data does not need to survive an IPL
Ephemeral CPACF protected-key stored in CP (not on disk somewhere)
AES encryption
Very low overhead via CPACF
z/VM
z/VM
abc
CPACF
***
<Details on the slide are self-explanatory>
z/VM Single System Image cluster
Value Proposition:
Protect guest paging data from administrators and from users who have access to volumes

25. Crypto Express6S – Feature Code 0893
Emperor II Technical Overview
9/12/2017
Crypto Express6S – Feature Code 0893
One PCIe adapter per feature
Initial order – two features
Designed to be compliant with FIPS Level 4
Installed in the PCIe I/O drawer
Up to 16 features per server
Prerequisite: CPACF enabling microcode (FC3863)
Support for SHA-3
Average 1.5X to 2X performance increase over Crypto Express5S
Three configuration options for the PCIe adapter
Only one configuration option can be chosen at any given time
Switching between configuration modes will erase all card secrets
Exception: Switching from CCA to accelerator or vice versa
Accelerator
CCA Coprocessor
EP11 Coprocessor*
TKE
N/A
CPACF NO
UDX
CDU
TKE
OPTIONAL
CPACF
REQUIRED
UDX
YES
CDU
YES(SEG3)
TKE
REQUIRED
CPACF
UDX NO
CDU
<Details on the slide are self-explanatory>
FC 0893
Clear Key RSA operations and SSL acceleration
Secure Key crypto operations
Secure Key crypto operations
*TKE is required for EP11 mode

26. Data Protection – IBM Secure Service Container
Emperor II Technical Overview
9/12/2017
Data Protection – IBM Secure Service Container
Extending the value of LinuxONE hardware crypto
Client Value Proposition:
Simplified, fast deployment and management of packaged solutions
Tamper protection during Appliance installation and runtime
Confidentiality of data and code running within the Appliance both at flight and at rest
Restricts administrator access to workload and data
Secure Service Container architecture builds on the value of the hardware crypto using a runtime environment designed to help clients reduce risk.
SAN
LinuxONE
<Details on the slide are self-explanatory>
Network
LinuxONE
Secure Service Container
Protected-key CPACF – key value not visible to OS or application

27. IBM Secure Service Container
Emperor II Technical Overview
9/12/2017
IBM Secure Service Container
The Base Infrastructure to Host and Build Software Appliances
Provides simplified mechanism for fast deployment and management of packaged solutions
Provides tamper protection during appliance installation and runtime
Ensures confidentiality of data and code running within the appliance – both at flight and at rest
Management provided via Remote APIs (RESTful) and web interfaces
Enables appliances to be delivered via distribution channels
Usability improvements based on customer feedback
Supported on Emperor II, Emperor, IBM z13® GA2,
Services
Applications
Operating System
Management
<Details on the slide are self-explanatory>

28. For More on IBM Secure Service Container
Emperor II Technical Overview
9/12/2017
For More on IBM Secure Service Container
Presentation for Customers – IBM Secure Service Container – Aug 3,
Video - Delivering highly secure solutions with IBM Secure Service Container – Jul 17,
CPO Lunch and Learn - Build Hacker-proof Blockchain with IBM Secure Service Container - Apr 4,
CPO White Paper - Achieving Critical Systems Security, Governance, and Compliance with the IBM Secure Service Container – March
CPO zSpotlight: Blockchain on z leverages IBM Secure Service Containers – Mar 16,
<Details on the slide are self-explanatory>

29. Emperor II Technical Overview
9/12/2017
Emperor II Processor Drawer Nests (2 drawers represented out of possible 4)
Models LM1-LM4
Model LM5
Cluster
Cluster
<Details on the slide are self-explanatory>

30. LinuxONE Emperor II I/O
Emperor II Technical Overview
9/12/2017
LinuxONE Emperor II I/O
<Details on the slide are self-explanatory>
IBM and BP Confidential – This material is for educational purpose only and is NOT customer ready.

31. LinuxONE Emperor II vs. Emperor CPC Drawer Structure and Interconnect
Emperor II Technical Overview
9/12/2017
LinuxONE Emperor II vs. Emperor CPC Drawer Structure and Interconnect PU
Mem
PSI
GX Bus
2x PCIe SC
Mem DIMMs
Node 1
A-Bus
S-Bus
X-Bus
Node 0 SC
cluster CP
Drawer
LinuxONE Emperor
Fully Populated
CPC Drawer SC
cluster CP
Drawer SC
cluster CP
Drawer SC
cluster CP
Drawer
<Details on the slide are self-explanatory>
LinuxONE Emperor II
Fully Populated
CPC Drawer
4 Drawer LinuxONE Emperor II System
Fully Interconnected
L1 (Instruction) increased by 33%
L2 (Data) increased by 100%
L3 increased by 100%
L4 reduced latency

32. LinuxONE Emperor II I/O Features Supported
Emperor II Technical Overview
9/12/2017
LinuxONE Emperor II I/O Features Supported
New Build Features
Features – PCIe I/O drawer
FICON Express16S+ (SX and LX, 2 SFPs, 2 CHPIDs)
OSA-Express6S
10 GbE LR and SR (1 SFP, 1 CHPID)
GbE SX, LX, and 1000BASE-T (2 SFPs, 1 CHPID)
10GbE RoCE Express2 (new 10GbE feature code)
zEDC Express
Crypto Express6S
PCIe I/O drawer
32 I/O slots
<Details on the slide are self-explanatory>

33. Emperor II Technical Overview
9/12/2017
A new I/O ASIC
ASIC defined: An application-specific integrated circuit (ASIC), is an integrated circuit (IC) customized for a particular use, rather than intended for general-purpose use (from Wikipedia, the free encyclopedia).
Used in:
FICON Express16S+ FC/FCP/zHPF
1 GbE OSA Express6S (LX or SX)
10 GbE OSA Express6S (LR or SR)
OSA Express6S 1000BASE-T
10GbE RoCE Express2 (new feature)
Benefits
Up to 70% less power consumption per feature
Power reduction when feature not in use
Improved performance and density
RAS equal or better than previous replacement features
Improvement in channel latency
<Details on the slide are self-explanatory>

34. Emperor II Technical Overview
9/12/2017
FICON Express16S+
For FICON, zHPF, and FCP environments
CHPID types: FC and FCP (2 PCHIDs/CHPIDs)
Auto-negotiates to 4, 8, or 16 Gbps
2 Gbps connectivity NOT supported
FICON Express8S will be available to order for 2Gbps connectivity
Increased bandwidth compared to FICON Express8S
10KM LX - 9 micron single mode fiber
Unrepeated distance - 10 kilometers (6.2 miles)
Receiving device must also be LX
SX - 50 or 62.5 micron multimode fiber
Distance variable with link data rate and fiber type
Receiving device must also be SX
2 channels of LX or SX (no mix)
Both ports must be FICON or FCP
70% less Power consumption
Small form factor pluggable (SFP) optics
Concurrent repair/replace action for each SFP
FC 0427 – 10KM LX
FC 0428 – SX
# Start I/O per sec: 2X-3X
OM3
<Details on the slide are self-explanatory> or
OM2 OR
LX/LX SX/SX

35. LinuxONE Emperor II I/O Connectivity Summary
Emperor II Technical Overview
9/12/2017
LinuxONE Emperor II I/O Connectivity Summary
Features
Offered As
Feature
Code
Maximum #
of features
Maximum
channels
Increments
per feature
Purchase
increments
Storage
FICON Express16S+ LX NB
0427
160
320 channels
2 channels
FICON Express16S+ SX
0428
Networking
OSA-Express6S GbE LX
0422 48
96 ports
2 ports
1 feature
OSA-Express6S GbE SX
0423
OSA-Express6S 10 GbE LR
0424
48 ports
1 port
OSA-Express6S 10 GbE SR
0425
OSA-Express6S 1000BASE-T
0426
Crypto
Crypto Express6S
0893
16 PCIe adapters 16
1 PCIe adapter
2 features**
Special purpose
10GbE RoCE Express2
0412
8 PCIe adapters
16 ports
2 ports per adapter
zEDC Express
0420
<Details on the slide are self-explanatory>

36. Emperor II Technical Overview
9/12/2017
Other Considerations
Linux: Linux can exploit RoCE Express2 as a standard NIC (Network Interface Card) for Ethernet. A specific Linux distribution level is required (reference PSP bucket for additional details).
SLES 11 SP4, SLES 12 SP2
RHEL 6.8, RHEL 7.3
Ubuntu (+ additional patches)
Note. Linux does not currently support SMC-R.
Configuration or deployment issues that should be considered by field personnel or the customer In addition to the existing RoCE Express hardware installation procedures, when the FID is configured in HCD the RoCE Express2 port number is also required. Port number must be specified. There is no default. RoCE Express2 will support a greater number of Virtual Functions per physical port (63). This aspect will benefit the Linux shared RoCE environment.
z/VM guest support for both SMC-R and SMC-D
Linux (not IBM) distributions may add support (in the future) for RDMA stack (check distribution support)
Linux RDMA and SMC-R are two DIFFERENT protocols. Native RDMA requires application support, while SMC-R requires NO application change.

37. IBM Dynamic Partition Manager
Emperor II Technical Overview
9/12/2017
IBM Dynamic Partition Manager
<Details on the slide are self-explanatory>

38. 3 things to know about IBM Dynamic Partition Manager (DPM)
Emperor II Technical Overview
9/12/2017
3 things to know about IBM Dynamic Partition Manager (DPM)
Fast
Much faster than managing with HCD and/or HCM
From hours to minutes
Easy
Intuitive user interface
No need for multiple administrators with different skills or tools
Do NOT expect First In Enterprise Linux clients to adopt the legacy way
Powerful
The same low overhead PR/SM™ hardware virtualization without the complexity
Supports dynamic configuration changes with just a few clicks of the mouse button
Provides a foundation for bare metal Cloud
<Details on the slide are self-explanatory>

39. DPM functions via Graphical and API interfaces
Emperor II Technical Overview
9/12/2017
DPM functions via Graphical and API interfaces
<Details on the slide are self-explanatory>

40. DPM Technical Specifications
Emperor II Technical Overview
9/12/2017
DPM Technical Specifications
IBM LinuxONE Emperor or Emperor II or Rockhopper
Feature Code #0016: Hardware Requirements for IBM DPM
Two dedicated OSA-Express 5S 1000BASE-T Ethernet
Supported Features
FICON Express16S+ (Type FCP)
OSA Express6S
Crypto Express6S
zEDC Express
RoCE Express2
HiperSockets™
Hypervisors and Operating Systems
KVM and/or Linux on LinuxONE
z/VM support for FCP-only configurations with z/VM 6.4
IBM Secure Service Container Appliances
No support yet for
GDPS® Virtual Appliance
FICON Express16S+ (Type FC)
No support for
CTC adapters are required for z/VM SSI configuration and is not supported by DPM
<Details on the slide are self-explanatory>
Statement of Direction of Support of ECKD® :
IBM intends to deliver support for adding and configuring ECKD FICON disks to partitions created in Dynamic Partition Manager (DPM) mode for Linux running native in an LPAR, Linux running under KVM on z, and Linux running under z/VM 6.4. z/VM Single System Image requires FICON CTC

41. Options for Capacity on Demand
Emperor II Technical Overview
9/12/2017
Options for Capacity on Demand
<Details on the slide are self-explanatory>

42. LinuxONE Capacity on Demand (CoD)
Emperor II Technical Overview
9/12/2017
LinuxONE Capacity on Demand (CoD)
Capacity on Demand
Permanent Upgrade –> CIU (Customer Initiated Upgrade)
Temporary Upgrade
Replacement Capacity
Billable Capacity
(On/Off CoD)
Capacity Backup (CBU)
Capacity for Planned Event (CPE)
Pre-paid
Post-paid
CIU = Customer Initiated Upgrade
Using pre-paid unassigned capacity up to the limit of the HWM
No expiration
Capacity
- MSU %
- # Engines
On/Off CoD with tokens
180 days expiration
Capacity
- MSU %
- # Engines
Tokens
- MSU days
- Engine days
On/Off CoD with tokens
No expiration
Capacity
- MSU %
- # Engines
Tokens
- MSU days
- Engine days
On/Off CoD
180 days expiration
Capacity
- MSU %
- # Engines 43

43. Installation Planning for LinuxONE Emperor II
Emperor II Technical Overview
9/12/2017
Installation Planning for LinuxONE Emperor II
<Details on the slide are self-explanatory>

44. Front view – LinuxONE Emperor II Systems with 4 CPC Drawers
Emperor II Technical Overview
9/12/2017
Front view – LinuxONE Emperor II Systems with 4 CPC Drawers
Up to 4 CPC Drawers
Up to 5 I/O Drawers
<Details on the slide are self-explanatory>
N+1 radiator design
for LinuxONE Air-cooled
Front view – Radiator-based Air Cooled Emperor II System with 4 CPC Drawers
Front View – Water cooled Emperor II System with 4 CPC Drawers

45. LinuxONE Emperor II Environmental vs. LinuxONE Emperor
Emperor II Technical Overview
9/12/2017
LinuxONE Emperor II Environmental vs. LinuxONE Emperor
Floor space – No change
Overhead I/O or Power – No change
Power – No change to typical power consumption
Environment – New ASHREA A3 classification:
40C°/104F° maximum ambient temperature
Customer Water – No change
Weight – Slight increase in weight depending on configuration
Airflow – No change
<Details on the slide are self-explanatory>
ASHREA: American Society of Heating, Refrigerating and Air-Conditioning Engineers

46. Available HMC configurations
Emperor II Technical Overview
9/12/2017
Available HMC configurations
FC (1U HMC)
LinuxONE Emperor II only - Includes chassis/server/keyboard/display, maximum of 10
Customer’s responsibility to order a rack for mounting
FC 0082 (MiniTower)
Can be ordered as new for LinuxONE Emperor II, maximum of 10
<Details on the slide are self-explanatory>
Note: Previous HMCs (FC 0092, 0094, 0095, and 0096) already installed can support Linux Emperor II and require appropriate driver level upgrade

47. Operating System & Hypervisor Support
Emperor II Technical Overview
9/12/2017
Operating System & Hypervisor Support
Linux on z Systems
IBM cannot legally discuss exploitation prior to GA from distributors.
Officially Tested: ibm.com/systems/z/os/linux/resources/testedplatforms.html
Minimum Distributions:
SLES 12 SP2
SLES 11 SP4
RHEL 7.3
RHEL 6.9
Ubuntu
IBM
LinuxONE
Emperor II
z/VM
z/VM 6.4 with PTFs
Optionally can include IBM WAVE for z/VM
z/VM 6.3 with PTFs
Service withdrawn for z/VM 6.3 on December 13, 2017
<Details on the slide are self-explanatory>
KVM for IBM z
KVM for IBM z with latest Fixpack provides toleration mode
Can no longer order after August 28, 2017
End of Service in March 2018 48

48. Emperor II Technical Overview
9/12/2017
The Most Highly Engineered System for Data Serving The Most Securable Linux Platform
<Details on the slide are self-explanatory>

49. Emperor II Technical Overview
9/12/2017
Appendix
<Details on the slide are self-explanatory>

50. Memory Configurations and Increments
Emperor II Technical Overview
9/12/2017
Memory Configurations and Increments
DDR4 Memory DIMMS
An additional 192 GB of memory is reserved above the customer purchase amount for the Hardware System Area (HSA).
Emperor II Model
Number of CPU drawers
Maximum Memory
LM1 1
8 000 GB (8 TB)
LM2 2
GB (16 TB)
LM3 3
GB (24 TB)
LM4 4
GB (32 TB)
LM5
Customer offering increments are:
64 GB memory increments from 256 GB thru 384 GB
128 GB memory increments from 384 GB thru 896 GB
256 GB memory increments from 896 GB thru 2944 GB
512 GB memory increments from 2944 GB thru GB
<Details on the slide are self-explanatory>

51. LinuxONE Emperor II Processor Features
Emperor II Technical Overview
9/12/2017
LinuxONE Emperor II Processor Features
Model
Drawers x PU’s/drawer
IFLs (uIFLs2)
Std SAPs
Optional SAPs
Std. Spares
IFP
CPs**
LM1
1 x 41
0-33
(0-32) 5
0-4 2 1
0 – 1
LM2
2 x 41
0-69
(0-68) 10
0-8
LM3
3 x 41
0-105
(0-104) 15
0-12
LM4
4 x 41
0-141
(0-140) 20
0-16
LM5
4 x 49
0-170
(0-169) 23
<Details on the slide are self-explanatory>
** One CP (401) is permitted only to support the GDPS Virtual Appliance, if ordered.
At least one IFL must be purchased in every machine and one CP is optional for use by the GDPS Virtual Appliance.
“uIFL” stands for Unassigned IFL.
The IFP is conceptually an additional, special purpose SAP – used by PCIe I/O features.

52. Upgrades LinuxONE Emperor II LMx to Emperor II LMx
Emperor II Technical Overview
9/12/2017
Upgrades LinuxONE Emperor II LMx to Emperor II LMx
 From / To
LM2
LM3
LM4
LM5
LM1
YES NO
<Details on the slide are self-explanatory>
Note: Upgrading from LinuxONE Emperor II model LM1-LM4 to a model LM5 is not supported – Factory build only.

53. Upgrades LinuxONE Emperor II LMx to z14 M0x
Emperor II Technical Overview
9/12/2017
Upgrades LinuxONE Emperor II LMx to z14 M0x
From / To 
z14 M01
z14 M02
z14 M03
z14 M04
z14 M05
LM1
YES NO
LM2
LM3
LM4
LM5
<Details on the slide are self-explanatory>

54. LinuxONE Emperor II Functions and Features (GA Driver Level 32)
Emperor II Technical Overview
9/12/2017
LinuxONE Emperor II Functions and Features (GA Driver Level 32)
System, Processor, Memory
Five hardware models (LM1 to LM5)
Ten cores per 14nm PU Single Chip Module (SCM)
Up to 170 Integrated Facility for Linux (IFL) processors and optional System Assist Processors (SAPs)
Increased Uniprocessor capacity (+10%)
CPC Drawers backplane Oscillator (1 to 4 CPC drawers)
2nd generation SMT (for IFLs and SAPs) and enhanced SIMD
Pause-less garbage collection for Java
Improved in-core data compression and data encryption
Enhanced processor/cache design with bigger cache sizes
Up to 32 TB of Redundant Array of Independent Memory (RAIM) – Up to 8 TB per CPC Drawer – 192 GB HSA
CPC Drawer/Memory Affinity and enhanced PR/SM
Up to 85 LPARs; up to 16 TB per LPAR (OS / hypervisor dependant)
Dynamic Partition Manager (DPM) enhancements
I/O Subsystem, STP, Security
PCIe Gen3 I/O fanouts with 16 GBps Buses
6 LCSS and 4th Subchannel Set per LCSS
New FICON Epxress16S+ with increased start I/O rate
New OSA Express6S cards
New 10 GbE RoCE Express2
IBM Secure Service Container for software appliances
New Crypto Express6S with support for up to 85 Domains; and cryptographic enhancements
STP Enhancements
IBM
LinuxONE
Emperor II
RAS, Other Infrastructure Enhancements
GDPS Virtual Appliance
Secure/Trusted SE boot and HMC
New N+1 ‘radiator’ design for Air Cooled System
Rack-Mounted Support Elements (SEs) in the CPC
Support for ASHRAE Class A3 datacenter
New Tower or Rack-mounted HMCs and TKEs
TKE 9.0 LICC
<Details on the slide are self-explanatory> 55

55. Memory for LinuxONE Emperor II Model LM1 (1 CPC Drawer)
Emperor II Technical Overview
9/12/2017
Memory for LinuxONE Emperor II Model LM1 (1 CPC Drawer)
Feature
Customer Purchase
Dial Max
1660
256 GB
320 GB
1661
1662
384 GB
576 GB
1663
448 GB
1664
512 GB
1665
1666
704 GB
832 GB
1667
1668
960 GB
1088 GB
1669
1670
1216 GB
1344 GB
1671
1672
1472 GB
1600 GB
1673
1674
1856 GB
1675
2112 GB
2368 GB
1676
Feature
Customer Purchase
Dial Max
1677
2624 GB
2880 GB
1678
1679
3136 GB
3392 GB
1680
1681
3648 GB
3904 GB
1682
1683
4116 GB
4928 GB
1684
1685
5440 GB
3952 GB
1686
3962 GB
1687
6464 GB
6976 GB
1688
6076 GB
1689
7488 GB
8000 GB
1690
<Details on the slide are self-explanatory>

56. Memory for LinuxONE Emperor II Model LM2 (2 CPC Drawers)
Emperor II Technical Overview
9/12/2017
Memory for LinuxONE Emperor II Model LM2 (2 CPC Drawers)
Feature
Customer Purchase
Dial Max
1660
256 GB
832 GB
1661
320 GB
1662
384 GB
1663
448 GB
1664
512 GB
1665
576 GB
1666
704 GB
1667
1668
960 GB
1088 GB
1669
1670
1216 GB
1344 GB
1671
1672
1472 GB
1600 GB
1673
1674
1856 GB
1675
2112 GB
1676
2368 GB
Feature
Customer Purchase
Dial Max
1677
2624 GB
1678
2880 GB
1679
3136 GB
1680
3392 GB
1681
3648 GB
1682
3904 GB
1683
4416 GB
1684
4928 GB
1685
5440 GB
1686
5952 GB
1687
6464 GB
1688
6976 GB
1689
7488 GB
1690
8000 GB
1691
8512 GB
9024 GB
1692
1693
9536 GB
10048 GB
1694
Feature
Customer Purchase
Dial Max
1695
10560 GB
11072 GB
1696
1697
11584 GB
12096 GB
1698
1699
12608 GB
13120 GB
1700
1701
13632 GB
14144 GB
1702
1703
14656 GB
15168 GB
1704
1705
15680 GB
16192 GB
1706
<Details on the slide are self-explanatory>

57. Memory for LinuxONE Emperor II Model LM3 (3 CPC Drawers)
Emperor II Technical Overview
9/12/2017
Memory for LinuxONE Emperor II Model LM3 (3 CPC Drawers)
Feature
Customer Purchase
Dial Max
1660
256 GB
1344 GB
1661
320 GB
1662
384 GB
1663
448 GB
1664
512 GB
1665
576 GB
1666
704 GB
1667
832 GB
1668
960 GB
1669
1088 GB
1670
1216 GB
1671
1672
1472 GB
1600 GB
1673
1674
1856 GB
1675
2112 GB
1676
2368 GB
1677
2624 GB
Feature
Customer Purchase
Dial Max
1678
2880 GB
1679
3136 GB
1680
3392 GB
1681
3648 GB
1682
3904 GB
1683
4416 GB
1684
4928 GB
1685
5440 GB
1686
5952 GB
1687
6464 GB
1688
6976 GB
1689
7488 GB
1690
8000 GB
1691
8512 GB
1692
9024 GB
1693
9536 GB
1694
10048 GB
1695
10560 GB
Feature
Customer Purchase
Dial Max
1696
11072 GB
1697
11584 GB
1698
12096 GB
1699
12608 GB
13120 GB
1700
1701
13632 GB
14144 GB
1702
1703
14656 GB
15168 GB
1704
1705
15680 GB
16192 GB
1706
1707
16704 GB
17216 GB
1708
1709
17728 GB
18240 GB
1710
1711
18752 GB
19264 GB
1712
Feature
Customer Purchase
Dial Max
1713
19776 GB
20288 GB
1714
1715
20800 GB
21312 GB
1716
1717
21824 GB
22336 GB
1718
1719
22848 GB
23360 GB
1720
1721
23872 GB
24384 GB
1722
<Details on the slide are self-explanatory>

58. Memory for LinuxONE Emperor II Model LM4/LM5 (4 CPC Drawers) (Pt 1)
Emperor II Technical Overview
9/12/2017
Memory for LinuxONE Emperor II Model LM4/LM5 (4 CPC Drawers) (Pt 1)
Feature
Customer Purchase
Dial Max
1660
256 GB
1856 GB
1661
320 GB
1662
384 GB
1663
448 GB
1664
512 GB
1665
576 GB
1666
704 GB
1667
832 GB
1668
960 GB
1669
1088 GB
1670
1216 GB
1671
1344 GB
1672
1472 GB
1673
1600 GB
1674
1675
2112 GB
1676
2368 GB
1677
2624 GB
Feature
Customer Purchase
Dial Max
1678
2880 GB
1679
3136 GB
1680
3392 GB
1681
3648 GB
1682
3904 GB
1683
4416 GB
1684
4928 GB
1685
5440 GB
1686
5952 GB
1687
6464 GB
1688
6976 GB
1689
7488 GB
1690
8000 GB
1691
8512 GB
1692
9024 GB
1693
9536 GB
1694
10048 GB
1695
10560 GB
<Details on the slide are self-explanatory>

59. Memory for LinuxONE Emperor II Model LM4/LM5 (4 CPC Drawers) (Pt 2)
Emperor II Technical Overview
9/12/2017
Memory for LinuxONE Emperor II Model LM4/LM5 (4 CPC Drawers) (Pt 2)
Feature
Customer Purchase
Dial Max
1696
11072 GB
1697
11584 GB
1698
12096 GB
1699
12608 GB
1700
13120 GB
1701
13632 GB
1702
14144 GB
1703
14656 GB
1704
15168 GB
1705
15680 GB
1706
16192 GB
1707
16704 GB
17216 GB
1708
1709
17728 GB
18240 GB
1710
1711
18752 GB
19264 GB
1712
Feature
Customer Purchase
Dial Max
1713
19776 GB
20288 GB
1714
1715
20800 GB
21312 GB
1716
1717
21824 GB
22336 GB
1718
1719
22848 GB
23360 GB
1720
1721
23872 GB
24384 GB
1722
1723
24896 GB
25408 GB
1724
1725
25920 GB
26432 GB
1726
1727
26944 GB
27456 GB
1728
Feature
Customer Purchase
Dial Max
1729
27968 GB
28480 GB
1730
1731
28992 GB
29504 GB
1732
1733
30016 GB
30528 GB
1734
1735
31040 GB
31552 GB
1736
1737
32064 GB
32576 GB
1738
<Details on the slide are self-explanatory>

60. Hardware Crypto support in IBM LinuxONE Architecture
Emperor II Technical Overview
9/12/2017
Hardware Crypto support in IBM LinuxONE Architecture
LinuxONE CPC
Drawers
LinuxONE PU SCM
CPACF
Crypto Express6S
PCIe I/O drawers
Rack Mounted or Tower
Trusted Key Entry
<Details on the slide are self-explanatory>
IBM LinuxONE Emperor II
Smart Cards
Smart Card Readers

61. Five LinuxONE Emperor II models
Emperor II Technical Overview
9/12/2017
Five LinuxONE Emperor II models
Machine Type 3906
Model
Air
Water
# PU’s
LM1
FC1107
FC1112 33
LM2
FC1108
FC1113 69
LM3
FC1109
FC1114
105
LM4
FC1110
FC1115
141
LM5
FC1111
FC1116
170
<Details on the slide are self-explanatory>
Air = Radiator cooled
Water = Water cooled

62. IBM LinuxONE Availability Dates
Emperor II Technical Overview
9/12/2017
IBM LinuxONE Availability Dates
The following are available as of September 13, 2017
IBM Emperor II Models LM1, LM2, LM3, LM4, and LM5
Field installed features and conversions on IBM Emperor II that are delivered solely through a modification to the machine's Licensed Internal Code (LIC)
TKE 9.0 LIC (#0879) on IBM LinuxONE Emperor II, IBM LinuxONE Emperor™, and IBM LinuxONE Rockhopper ™
TKE Rack Mount w/4768 (#0085) on Emperor II, Emperor, and Rockhopper
TKE w/4768 (#0086) on Emperor II, Emperor, and Rockhopper
HMC (#0082) on Emperor II, Emperor, and Rockhopper
HMC Rack Mount (#0083) on Emperor II, Emperor, and Rockhopper
<Details on the slide are self-explanatory>
LinuxONE
Emperor II

63. IBM LinuxONE Availability Dates
Emperor II Technical Overview
9/12/2017
IBM LinuxONE Availability Dates
Available December 15, 2017
z/VM Guest exploitation support for the Instruction Execution Protection Facility
z/VM Guest exploitation support for pause-less garbage collection
z/VM support for encrypted paging
Available December 31, 2017
MES features for IBM Emperor II Models LM1, LM2, LM3, LM4, and LM5
MES upgrades for IBM Emperor II LMx models to IBM z14 M0x models
<Details on the slide are self-explanatory>
LinuxONE
Emperor II

64. IBM LinuxONE Emperor II: Designed for Trusted Digital Experiences
Emperor II Technical Overview
9/12/2017
IBM LinuxONE Emperor II: Designed for Trusted Digital Experiences
Pervasive
Encryption is the
New Standard
Analytics & Machine Learning for Continuous Intelligence across the Enterprise
Open Enterprise Cloud to Extend, Connect and Innovate
Cut new service build time by 90% using secure APIs on IBM LinuxONE and advanced DevOps
Seamlessly connect any service from public and private cloud with transactions and data on IBM LinuxONE
Accelerate innovation with an ecosystem of partners to develop and manage enterprise wide applications leveraging 1000’s open source software packages
100% encryption of all data
Zero application changes
Zero impact to service levels
Protect client and corporate from internal and external threats
Anticipate customer needs and embed insight in every business transaction
Dramatically faster lifecycle management of behavioral models with more memory and greater processing capacity
Derive impactful insights by combining IBM LinuxONE data with other structured and unstructured external data sources
The LinuxONE messaging focuses on Trusted Digital Experiences.
Trust is core to revenue expansion and reducing customer churn.
Gartner has pointed out that trust is core to the digital economy and is based on insuring that the information you share will be kept safe and used for your benefit and not accidentally exposed for malicious use.
Trust is also core to a companies ability to confirm the validity of their product quality throughout its product lifecycle (for example – making sure that shipping containers actually contain what the bill of lading claims from point of manufacturing to point of destination.)
Companies that do not maintain trust will lose brand value, good will, credibility and opportunities.
There are four messaging pillars within Trusted Digital Experiences.
The z Analytics software solutions participate in all pillars.

65. Quick View of IBM LinuxONE Emperor II
Emperor II Technical Overview
9/12/2017
Quick View of IBM LinuxONE Emperor II
New cover, no vertical stripe, LinuxONE badge relocated
Five models: LM1, LM2, LM3, LM4 and LM5
Processor Units (PUs)
5.2 GHz
41 (49 for LM5) PU cores per CPC drawer
Single thread capacity ~1832 PCI
33, 69, 105, 141 or 170 IFL processors available for Linux workloads
Up to 23 SAPs per system, standard
New on LinuxONE Emperor II is SAPs are SMT
Enhanced performance for compression and crypto coprocessor
Unchanged from Emperor I
2 spares designated per system
1 CP available (option) to support the GDPS Virtual Appliance
Up to 85 LPARs
Memory
Redundant Array of Independent Memory, like Emperor I
System Min of 256 GB - up to 8 TB / drawer GB Fixed HSA, standard
Up to 32 TB for System and up to 16 TB per LPAR (OS dependent)
I/O
Now a single System Control Chip serves each drawer
Technology refresh of all I/O cards (FICON, OSA, RoCE)
16 GBps PCIe Gen 3 I/O Interconnects
6 Logical Channel Subsystems (LCSSs) with 4 Sub-channel sets per LCSS
IBM LinucONE Emperor II
Machine Type: 3906
Models:
LM1, LM2, LM3, LM4, LM5
Model
Max IFLs
Max Memory
LM5
170
32 TB
LM4
141
LM3
105
24 TB
LM2 69
16 TB
LM1 33
8 TB*
<Details on the slide are self-explanatory> 66

66. Cross-Sell: IBM LinuxONE with IBM Storage and IBM FlashSystem
IBM Storage Solution
Support for LinuxONE
IBM FlashSystem A9000/A9000R
KVM on z, IBM z/VM, Linux on z (= “bare metal”, native, LPAR)
FCP connectivity only
IBM System Storage® DS8880
zHigh Performance FICON (zHPF) and Extended Address Volumes
GDPS/PPRC HyperSwap®
FICON Express16S with Forward Error Correction Codes, FICON Dynamic Routing, Read Diagnostic Parameters, Enhanced Write Protocol
XIV® Storage Systems
IBM z/VM, Linux on z - FCP connectivity only
Storwize® V7000
KVM on z, z/VM, and Linux on z - FCP connectivity only
SVC
IBM FlashSystem V9000
IBM FlashSystem 900
TS7700
z/VM required for its channel protocols; KVM not supported, native Linux not supported
FICON connectivity only
TS1150 , TS4500
FCP can attach to Linux on z
Support for Linux on z, and z/VM, via FICON if TS7700 is front-end
<Details on the slide are self-explanatory>
1GDPS support for HyperSwap via the GDPS Virtual Appliance for Linux running under z/VM or KVM (GDPS appliance not available for native Linux on z)
LUP12387-USEN-00