Callable services

These callable services can be used on a system without coprocessors with an initialized CKDS. The key management services can only be used to manage clear keys, encrypted keys cannot be managed in this configuration.

• Key Data Set List (CSFKDSL)
• Key Data Set Metadata Read (CSFKDMR)
• Key Data Set Metadata Write (CSFKDMW)
• Key Record Create (CSNBKRC) and Key Record Create2 (CSNBKRC2)
• Key Record Delete (CSNBKRD)
• Key Record Read (CSNBKRR) and Key Record Read2 (CSNBKRR2)

  Key Record Read will not return a clear key token to the caller unless the caller is in supervisor state or system key.

• Key Record Write (CSNBKRW) and Key Record Write2 (CSNBKRW2)

These services support labels for the key identifier:

• Symmetric Key Decipher (CSNBSYD)
• Symmetric Key Encipher (CSNBSYE)
• Symmetric MAC Generate (CSNBSMG)
• Symmetric MAC Verify (CSNBSMV)

These services do not require a coprocessor:

• Key Token Build (CSNBKTB)
• MDC Generate (CSNBMDG)
• One Way Hash (CSNBOWH)
• Random Number Generate (CSNBRNG)
• Random Number Generate Long (CSNBRNGL)