Example 2: ADD Control Statement with CLEAR Keyword

This example shows a control statement that specifies that KGUP add an entry to the CKDS. Because the CLEAR keyword is specified, KGUP processes only this control statement if ICSF is in special secure mode.

   ADD  TYPE(EXPORTER)  LABEL(ATMBRANCH5MO001)  CLEAR

KGUP checks that an entry with the label ATMBRANCH5MO001 with the type EXPORTER does not already exist in the CKDS. KGUP allows EXPORTER, IMPORTER, IPINENC, PINGEN, PINVER, and OPINENC key pairs to have the same label. All other key types require a unique label. If the entry already exists, KGUP stops processing the control statement.

If the entry does not exist, KGUP creates the entry for the label specified and the type exporter. KGUP generates a double-length key, encrypts the key under the master key, and places the key in the entry.

KGUP stores information to the key output data set. You can send the information to another system that does not use KGUP. The other system uses the information to create the complements of the keys you created. The information contains the clear key value and specifies the key type as importer.

For example, the control statement would be in this format:

   ADD  TYPE(IMPORTER)  LABEL(ATMBRANCH5MO001)  CLEAR,
   KEY(6709E5593933DA00,9099937DDE93A944)

The key value is the clear key value of the key created. The type of key is the complement of the type of key created.

Note: The key in the previous example is a mixed parity key. KGUP imports mixed parity keys, but issues a warning message.