The FICON® encryption feature provides cryptographic protection of data transferred over FICON® between IBM® Z system (host) and the storage system through encryption. This feature is compatible with IBM® Fibre Channel Endpoint Security (IFCES) and is enabled by using key management with key management servers (KMSs), port authentication for the path (Authentication of FC device), and encryption of data-in-flight (EDIF: Encryption of Data-in-Flight). When both the host and the storage system support the encryption feature, authenticated communication with port authentication and data encryption are established.
The encryption settings on the storage system are configured by using Fibre Channel Endpoint Security for Mainframe.