This figure shows Integrated Cryptography Service Facility (ICSF) components:

Keystore IBM TKDS Date/ID/Key Bits

ICSF Callable Services Proxy & Secure Protocol (AT-TLS)

KMA Functionality (Secure Protocol & Key Derivation)

Drive (Unchanged drive API)