ICSF writes
to subtype 15 whenever you create or delete a retained private key
in a
coprocessor. Subtype 15 contains this information:
- The operation performed (created, deleted from coprocessor, deleted
from PKDS)
- The type of coprocessor
- The retained key label
- The cryptographic coprocessor processor number
- The cryptographic coprocessor serial number
- The domain index
SMF records for this subtype will also contain server user and
end user audit sections.