Example 1: ADD Control Statement

This example shows a control statement that specifies that KGUP add an entry to the CKDS.

   ADD  TYPE(IMPORTER) LABEL(DASDOCT93401E)

KGUP checks that an entry labeled DASDOCT93401E with a keytype of importer does not already exist in the CKDS. KGUP allows EXPORTER, IMPORTER, IPINENC, PINGEN, PINVER, and OPINENC key pairs to have the same label. All other key types require a unique label. If the key entry already exists, KGUP stops processing the control statement.

If the entry does not exist, KGUP creates the entry with a label of DASDOCT93401E and type of IMPORTER. KGUP generates a double-length key and encrypts the key under the master key. KGUP places the key in the entry.

Note: Because neither the TRANSKEY nor CLEAR keyword is specified, KGUP does not create a complementary key. You cannot use this key to communicate with another system. You can, however, use the key to encipher a key stored with data in a file. CIPHER, CIPHERXL, DATA, DATAM, DKYGENKY, IMPORTER, KEYGENKY and MAC are the only key types that do not require either the TRANSKEY or CLEAR keyword specified.