This service refresh contains the latest IBM fixes, the most recent OpenJDK level, and the following new features.

OpenJ9 features:

• This release contains features from the latest release of the Eclipse OpenJ9 project, as listed in the Version 0.35 OpenJ9 user documentation.

Other features:

• IBMZSecurity security provider added to default provider list

• The IBMZSecurity provider is now added to the default security provider list, which means that it is enabled by default. For more information, see Security guide.

• IBMJCECCA RSA cipher support for OAEP padding

  The IBMJCECCA security provider now supports Optimal Asymmetric Encryption Padding (OAEP padding) for RSA encryption and decryption that uses keys from a PKA data set (PKDS) that you manage with ICSF. You can now specify OEAP algorithms in the OAEPParameters class. For more information, see OAEPParameters class documentation.

• Performance improvements to certain algorithms for the IBMJCECCA security provider

• Performance improvements were implemented to the following algorithms for the IBMJCECCA provider:

• Cipher algorithms with CLEAR keys

• AES/CBC/NoPadding, 128/192/256 bit

• AES/CBC/PKCS5Padding, 128/192/256 bit

• DES/CBC/NoPadding, 56-bit

• DES/CBC/PKCS5Padding, 56-bit

• DESede/CBC/NoPadding, 112/168 bit

• DESede/CBC/PKCS5Padding, 112/168 bit

• SHA algorithms

• SHA1

• SHA224

• SHA256

• SHA384

• SHA512
  
  
  How to obtain IBM Semeru Runtime Certified Edition for z/OS, Version 11?
  IBM Semeru Runtime Certified Edition for z/OS, Version 11 is available for zero license charge through Shopz (5655-DGJ) SMP/E, or you can download the non-SMP/E here.  The subscription and service number is 5655-I48.
   
  Supporting Links:
  IBM Semeru Runtime Certified Edition for z/OS product page
  For additional information on installation, troubleshooting and support please visit IBM Documentation.