The following reference table lists
<task-user> needs access
| CSFSERV Resource | ICSF Service | Service Description | ACP | Access for | ACP status |
|---|---|---|---|---|---|
| CSFCRC | CSFCRC | Coordinate KDS Administration | A | ||
| CSFDEC | CSNBDEC | Decipher | 000F | A | ED |
| CSFDSG | CSNDDSG | Digital Signature Generate | 0100 | A, L | ED |
| CSFDSV | CSNDDSV | Digital Signature Verify | 0101 01FF |
A, L | ED |
| CSFEDH | CSNDEDH | ECC Diffie-Hellman | 0360 0362 0367 |
A, L | ED |
| CSFENC | CSNBENC | Encipher --DES | 000E | A | ED |
| CSFIQF | CSNBIQF | ICSF Query Facility | A | ||
| CSFKDMR | CSNBKDMR | Key Data Set Metadata Read | A | ||
| CSFKDSL | CSNBKDSL | Key Data Set Metadata Read | A | ||
| CSFKGN2 | CSNBKGN2 | Key Generate2 | 00EB 00EC 00EA |
L | ED |
| CSFKGN | CSNBKGN | Key Generate | 008C 00D7 008E |
L | ED |
| CSFKIM | CSNBKIM | Key Import | 0012 | A | ED |
| DATAM Key Management Control | 0275 | A | ED | ||
| CSFKRC | CSNBKRC | Key Record Create | n/a | L | |
| CSFKRC2 | CSNBKRC2 | Key Record Create2 | n/a | A, L | |
| CSFKRD | CSNBKRD | Key Record Delete | A | ||
| CSFKRR | CSNBKRR | Key Record Read | n/a | L | |
| CSFKRR2 | CSNBKRR2 | Key Record Read2 | n/a | A, L | |
| CSFKRW | CSNBKRW | Key Record Write | n/a | A, L | |
| CSFKRW2 | CSNBKRW2 | Key Record Write2 | n/a | A, L | |
| CSFKTB2 | CSNBKTB2 | Key Token Build2 | n/a | L | |
| CSFKYT | CSNBKYT | Key Test | 001D | A, L | AE |
| CSFKYT2 | CSNBKYT2 | Key Test2 -- AES, CMACZERO | 0021 | A, L | ED |
| Key Test2 -- AES, ENC-ZERO | 0022 | A, L | ED | ||
| Key Test2 -- DES, CMACZERO | 001D | A, L | AE | ||
| CSFKYTX | CSNBKYTX | Key Test Extended | 001D | L | AE |
| CSFMGN | CSNBMGN | MAC Generate | 0010 | A | ED |
| CSFMVR | CSNBMVR | MAC Verify | 0011 | A | ED |
| CSFOWH | CSFPOWH | One-Way Hash Generate | n/a | A, L | |
| CSFPKB | CSNDPKB | PKA Key Token Build | n/a | L | |
| CSFPKG | CSNDPKG | PKA Key Generate | 0103 | A, L | ED |
| CSFPKI | CSNDPKI | PKA Key Import | 0104 | A, L | ED |
| PKA Key Import -- Import an external trusted block | 003A *1) | A | |||
| CSFPKRC | CSNDKRC | PKDS Record Create | n/a | A, L | |
| CSFPKRD | CSNDKRD | PKA Key record Delete | A | ||
| CSFPKRR | CSNDKRR | PKDS Record Read | n/a | A, L | |
| CSFPKRW | CSNDKRW | PKDS Record Write | n/a | A, L | |
| CSFPKX | CSNDPKX | PKA Public Key Extract | n/a | A, L | |
| CSFPRR2 | CSNDRR2 | PKA Key record Read2 | A | ||
| CSFRNG | CSNBRNG | Random Number Generate | 008E | L | ED |
| CSFRNGL | CSNBRNGL | Random Number Generate | n/a | A, L | |
| CSFSAD | CSNBSAD | Symmetric Algorithm Decipher | 012B | A, L | ED |
| CSFSAE | CSNBSAE | Symmetric Algorithm Encipher | 012A | A, L | ED |
| CSFSYI | CSNDSYI | Symmetric Key Import - AES, PKCSOAEP, PKCS-1.2 | 012E | A, L | ED |
| Symmetric Key Import - AES, ZERO-PAD | 012F | A, L | ED | ||
| Symmetric Key Import - Allow wrapping override keywords | 0144 | A, L | ED | ||
| Symmetric Key Import - DES, PKA92 KEK | 0235 | A, L | ED | ||
| Symmetric Key Import - DES, PKCS-1.2 | 0106 | A, L | ED | ||
| Symmetric Key Import - DES, ZERO-PAD | 023D | A, L | ED | ||
| CSFSYI2 | CSNDSYI2 | Symmetric Key Import2 - AESKW | 0329 | A, L | ED |
| Symmetric Key Import2 - Allow wrapping override keywords | 02B9 | A, L | ED | ||
| Symmetric Key Import2 - AESKWCV | 02B4 | A | ED | ||
| Symmetric Key Import2 - AES,PKOAEP2 | 00FD | A, L | ED | ||
| Symmetric Key Import2 - HMAC,PKOAEP2 | 00F4 | A | ED | ||
| CSFSYX | CSNDSYX | Symmetric Key Export | 0130 00FC 0131 0327 |
A, L | ED |
Note 1*) - Only needed if your installation needs to install trusted blocks from the EKMF Workstation.