The Integrated Cryptographic Service Facility has implemented callable service in support of PKCS #11. A callable service is a routine that receives control using a CALL statement in an application language. Each callable service performs one or more functions, including:

• initializing and deleting PKCS11 tokens
• creating, reading, updating and deleting PKCS11 objects

Many services have hardware requirements. See each service for details. All new callable services will be invocable in AMODE(24), AMODE(31), or AMODE(64).

For more information about PKCS #11 see z/OS Cryptographic Services ICSF Writing PKCS #11 Applications.