Migrating to the variable length CKDS

If variable-length symmetric key tokens are to be stored in the CKDS, any existing CKDS must be converted to a variable length record format.

To convert to the LRECL = 1024 format, ICSF provides the conversion utility program, CSFCNV2, that converts a CKDS to the variable length format. See Converting a CKDS from fixed length to variable length record format for more information.

To convert to the KDSR format (HCR77A1 or later), see Migrating to the KDSR format key data set for more information.

There is no reason to migrate a variable length record CKDS if your applications are not using AES or HMAC keys in variable-length tokens. You can migrate to the variable length record at any time.

Note: All systems that will share a CKDS with the variable length record format must be running ICSF HCR7780 or later. Those with KDSR format must be running ICSF HCR77A1 or later.

To migrate to a variable length CKDS (LRECL=1024):

  1. Install the HC7780 or later release of ICSF on all systems that will share the CKDS.
  2. Allocate a new CKDS with the variable length record format. The new CKDS should be large enough to hold all key in the current CKDS.
  3. Disable dynamic CKDS updates on all systems.
  4. Run the CKDS Conversion2 utility to convert the existing CKDS records to the new record format
  5. Refresh the new CKDS on all systems that are sharing the CKDS
  6. Enable dynamic CKDS updates on all systems