Generate a Complementary Key Pair For Other Systems

You can also use KGUP as a key distribution center. KGUP generates a pair of complementary key values that are both used on other systems. KGUP encrypts the values under appropriate variants of two different exporter key-encrypting keys. KGUP does not alter your system's CKDS. The program stores two control statements each containing one of the keys that are encrypted under a transport key. You send the statements to two other sites which can create the keys and use the keys to exchange keys.

These statements show the syntax when you have KGUP generate a pair of complementary key values to send to other systems.

When you generate single-length transport or PIN key values:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(exporter,importer,ipinenc,opinenc, or pingen),
   TRANSKEY(key-label 1,key-label 2)  SINGLE

When you generate single-length DATA key values:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(data) OUTTYPE(data) TRANSKEY(key-label 1,key-label 2)

When you generate double-length DATA key values:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(data) LENGTH(16) TRANSKEY(key-label 1,key-label 2)

When you generate triple-length DATA key values:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(data) LENGTH(24) TRANSKEY(key-label 1,key-label 2)

When you generate single-length MAC key values:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(mac) OUTTYPE(mac or macver) TRANSKEY(key-label 1,key-label 2)

When you generate double-length DATAM key values:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label)
   TYPE(datam) OUTTYPE(datam or datamv),
   TRANSKEY(key-label 1,key-label 2)

When you generate a double-length key value:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(exporter,importer,ipinenc,opinenc, or pingen),
   TRANSKEY(key-label 1,key-label2)