Changes made in Cryptographic Support for z/OS V1R12-R13 (FMID HCR77A0)

This document contains information previously presented in z/OS ICSF Administrator's Guide, SA22-7521-16, which supports z/OS Version 1 Release 13.

This document is for ICSF FMID HCR77A0. This release of ICSF runs on z/OS V1R12, and z/OS V1R13, and only on zSeries hardware.

New information

Coordinated change master key for PKDS and TKDS.
Coordinated PKDS refresh.
PKCS #11 master key management.
KGUP has new key types and control statement keywords.
New support for IBM zEnterprise EC12
A new CCA access control points and ICSF utilities appendix was added.
Added new information to Key strength and wrapping of key.
Added new information for Unique Key Derive to Setting up profiles in the CSFSERV general resource class in System authorization facility (SAF) controls, Control Vector Table and Callable services affected by key store policy.

Extensive changes were made to Syntax of the ADD and UPDATE control statements.
Using the ADD and UPDATE control statements for key management and distribution functions was updated for AES keys.
Example control statements for Syntax of the OPKYLOAD Control Statement have been updated.
Cryptographic Key Data Set (CKDS) in Specifying KGUP data sets has multiple updates.
Using the pass phrase initialization utility was updated with new information about DES operational keys and the 24-byte DES master keys.
Algorithm for calculating a verification pattern was updated with new information about DES operational keys and the 24-byte DES master keys.
Pass Phrase Initialization master key calculations was updated with additional information about RSA and DES master keys.
Changes concerning the DES master key in Managing CCA Master Keyswas updated with new information.