Record type 82 (52) — ICSF record

Record type 82 is used to record information about the events and operations of the Integrated Cryptographic Service Facility (ICSF) program product. Record type 82 is written to the SMF data set at the completion of certain cryptographic functions:

  • Subtype 1 — is written whenever ICSF is started or the options refresh is performed.
  • Subtype 7 — is written when an operational key is imported from a coprocessor.
  • Subtype 8 — is written whenever the in-storage copy of the CKDS is refreshed.
  • Subtype 9 — is written whenever the CKDS is updated by a dynamic CKDS update service or the KDS Metadata write service or the CKDS KEYS utility.
  • Subtype 13 — is written whenever the PKDS is updated by a dynamic PKDS update service or the KDS Metadata write service or the PKDS KEYS utility.
  • Subtype 14 — is written when a clear master key part is entered on a cryptographic coprocessor.
  • Subtype 15 — is written whenever a retained key is created or deleted.
  • Subtype 16 — is written for each request and reply from calls to the CSFPCI service by TKE.
  • Subtype 18 — is written when the configuration of a coprocessor or accelerator changes.
  • Subtype 19 — is written periodically to record processing times for PCIXCC coprocessors.
  • Subtype 20 — is written periodically to record processing times for coprocessors or accelerators.
  • Subtype 21 — is written when ICSF issues IXCJOIN to join the ICSF sysplex group or issues IXCLEAVE to leave the sysplex group.
  • Subtype 22 — is written when the Trusted Block Create Callable services are invoked.
  • Subtype 23 — is written when the token data set (TKDS) is updated
  • Subtype 24 — is written when duplicate tokens are found.
  • Subtype 25 — is written when key store policy checking detects the unauthorized use of a key token.
  • Subtype 26 — is written whenever the in-storage copy of the PKDS is refreshed.
  • Subtype 27 — is written when key store policy PKA key extensions checking detects the unauthorized use of a key.
  • Subtype 28 — is written for information about High Performance Encrypted Key.
  • Subtype 29 — is written for each TKE workstation audit record received from a TKE workstation.
  • Subtype 30 — is written for each time an archived or inactive key data set record is referenced.
  • Subtype 31 — is written for cryptographic statistics data.
  • Subtype 40 — is written for lifecycle events related to symmetric CCA tokens. This replaces subtype 9.
  • Subtype 41 — is written for lifecycle events related to asymmetric CCA tokens. This replaces subtype 13.
  • Subtype 42 — is written for lifecycle events related to PKCS#11 objects. This replaces subtype 23.
  • Subtype 43 — is written when there is a configuration change for a regional cryptographic server.
  • Subtype 44 — is written for usage events related to symmetric CCA tokens.
  • Subtype 45 — is written for usage events related to asymmetric CCA tokens.
  • Subtype 46 — is written for usage events related to PKCS#11 objects.
  • Subtype 47 — is written for supported PKCS #11 usage events which do not involve an object.
  • Subtype 48 — is written for compliance warning events.

Macro to Symbolically Address Record Type 82: The SMF record mapping macro for ICSF type 82 record is CSFSMF82.

The mapping macro, CSFSMF82, resides in SYS1.MODGEN.