Records in the key data sets have metadata which can be used to
manage the life cycle of key material. The metadata can be used as
search criteria to generate list of labels or objects. The metadata
can be read and changed.
Note: Only the KDSR format of the key data
sets support all the metadata described in the section. Your existing
data sets can be converted to the KDSR format using
ICSF
panels or the Coordinated KDS Administration callable service
in
z/OS Cryptographic Services ICSF Application Programmer's Guide.
If you do not need metadata support for all of your key data sets,
you need only to convert those data sets which do need metadata support.
All of this metadata applies to the records in the CKDS and PKDS and
to the object records in the TKDS. While PKCS #11 token are stored
in the TKDS, they do not have metadata.