IBM Z provides cryptographic features to protect your data--and your client's data. Intrigued by the possibilities inherent in IBM Z cryptographic features? Uncertain as to what all these acronyms mean? Confused about which features operate when running under z/VM? Wondering about the basics of guest crypto configuration? Unsure of what to do with all those keys? Scared by the word 'cryptography'? This presentation aims to alleviate fear and uncertainty by explaining the IBM Z cryptographic 'stack': what the features do, how they help, how z/VM virtualizes them, and how a guest can capitalize upon them ... with as few security-related acronyms as possible. New features released in 1Q26 will also be introduced and discussed.