Clear Master Key (QC3CLRMK, Qc3ClearMasterKey) API


  Required Parameter Group:


 Service Program Name: QC3MKCLR

 Default Public Authority: *EXCLUDE

 Threadsafe: Yes

The Clear Master Key (OPM, QC3CLRMK; ILE, Qc3ClearMasterKey) API clears the specified master key version. Before clearing an old master key version, care should be taken to ensure no keys or data are are still encrypted under it.

For more information about master keys, see Cryptographic services key management.


Authorities and Locks

Required special authority
*ALLOBJ and *SECADM

Required Parameter Group

Master key ID
INPUT; BINARY(4)

For all master keys except the Save/Restore Master Key, the key and KVV for the specified version are set to null (binary 0). Clearing the Save/Restore Master Key sets the key value for the specified version to the default value with a KVV of hexadecimal '16C1D3E3C073E77DB28F33E81EC165313318CE54'.

The master key IDs are


Master key version
INPUT; CHAR(1)

The version of the master key


Error code
I/O; CHAR(*)

The structure in which to return error information. For the format of the structure, see Error code parameter.


Error Messages




API introduced: V5R4

[ Back to top | Cryptographic Services APIs | APIs by category ]