Generate a Complementary, Clear Key Value

You can have KGUP store complementary key information when KGUP generates a key. This information includes the key value. You send the information to another system which uses the information to generate the complementary key. KGUP stores the key value to create the complementary key in either clear or encrypted form. KGUP stores information both in and not in the form of a control statement.

These statements show the syntax when you have KGUP store the complementary key value in clear form.

Note: For these control statements, your system should be in special secure mode.

When you generate a single-length, transport or PIN clear key value:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(exporter,importer,ipinenc,opinenc, or pingen) CLEAR  SINGLE

When you generate a single-length, DATA clear key value:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(data) LENGTH(8) CLEAR

When you generate a double-length, DATA clear key value:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(data) LENGTH(16) CLEAR

When you generate a triple-length, DATA clear key value:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(data) LENGTH(24) CLEAR

When you generate a single-length, MAC clear key value:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(mac) OUTTYPE(mac or macver) CLEAR

When you generate a double-length, DATAM clear key value:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(datam) LENGTH(16) OUTTYPE(datam or datamv) CLEAR

When you generate a single-length, PINGEN clear key value:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(pingen) LENGTH(8) CLEAR

When you generate a double-length, clear key value:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(exporter,importer,ipinenc,opinenc, or pingen) CLEAR

When you generate a single-length, clear key value, and you are using the key to exchange keys with a cryptographic product that does not use control vectors:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(exporter or importer)  CLEAR  NOCV  SINGLE

When you generate a double-length, clear key value, and you are using the key to exchange keys with a cryptographic product that does not use control vectors:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(data) LENGTH(16) CLEAR NOCV

When you generate a triple-length, clear key value, and you are using the key to exchange keys with a cryptographic product that does not use control vectors:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(data) LENGTH(24)  CLEAR  NOCV

When you generate a double-length, clear key value, and you are using the key to exchange keys with a cryptographic product that does not use control vectors:

   ADD or UPDATE  LABEL(label) or RANGE(start-label,end-label),
   TYPE(exporter or importer)  CLEAR  NOCV

When you generate a clear key value to transport data-encrypting keys for use in the DES algorithm:

   ADD or UPDATE LABEL(label) TYPE(exporter or importer) CLEAR