You can perform many
ICSF administration
functions by using the TSO panels. RACF can protect access to these
functions. The functions include:
- Refreshing the CKDS or PKDS
- Setting the master keys
- Changing the master keys
- Clear key entry (access can also be controlled through the TKE
workstation, domain controls)
- Pass phrase MK/KDS initialization
- Administrative control functions (enabling and disabling dynamic
CKDS access, PKA callable services, and dynamic PKDS access)
These functions are treated the same way as callable services.
See 'Viewing and Changing System Status' in the z/OS Cryptographic Services ICSF Administrator's Guide for
more information.