You use KGUP to generate and maintain keys in the CKDS. KGUP creates key values that systems can use in key exchanges. The ICSF administrator uses job control language to start KGUP and specifies information to KGUP through the use of a control statement.
The KGUP exit receives a parameter that identifies the exit's calling point. Thus, the installation exit can perform different functions at each of the calls.
You can use the KGUP exit to change key values, make a copy of a CKDS entry, or end KGUP. Key generator utility program installation exit gives a more detailed description of the KGUP exit.