In Sept. 2012 IBM announced the latest zEnterprise machine which uses a new crypto card, the Crypto Express4S. Along with the hardware announcement, there is a new version of ICSF (Integrated Cryptographic Service Facility) available, Cryptographic Support for z/OS V1R12-V1R13 (aka HCR77A0). ICSF is the component of z/OS that provides cryptographic function on System z, including access to the System z hardware. This session will review the new hardware facilities that are available on the new machines, as well as some additional enhancements that are available via ICSF, but not specific to the hardware. These enhancements include extending the KDS Administration support for managing master keys across a CKDS/PKDS sharing Plex that was introduced in HCR7790, the previous version of ICSF.