How do I configure ZXTM to use the UltraSPARC T2 Crypto routines?

Short answer:

ZXTM (version 5.0 and later) will automatically use the UltraSPARC T1 and T2 on-board cryptographic routines if they are detected.

Long answer:

The Sun UltraSPARC T1 and T2 processors contain on-board cryptographic routines that speed up SSL connections. Both the T1 and T2 processors contain the ncp module which provides operations for the RSA algorithm. Additionally the T2 contains n2cp module which provides symmetric cipher support (such as AES, DES and 3DES) and digest algorithms (e.g. MD5 and SHA-1).

When ZXTM starts up it will detect the presence of the ncp support and if it is present it will take full advantage of the performance improvements. In particular DO NOT configure PKCS#11 support on the Global Settings -> SSL Hardware support (this is used for external SSL hardware such as a PCI card or network device).

You can check ZXTM is using the ncp support by running:

$ $ZEUSHOME/zxtm/bin/zeus.zxtm -vv
Version 5.0, Build date: May 20 2008 22:05:47
Compiled for platform: SunOS
Compression library      : zlib v1.2.3
Regex library            : PCRE v7.6
Crypto library           : Built-in PKCS#11: ncp/0 Crypto Accel Asym 1.0
Compiler                 : CC: Sun C++ 5.8 2005/10/13
XML library              : 2.6.23
XSLT library             : 10115

Note the "Crypto Library" line refers to ncp. If ZXTM is reporting itself as using something else you should check that the ncp support is enabled using the cryptoadm list command.

Crispin Flowerday [Zeus Dev Team] 18 September 2008