Generate a new RSA or EC public/private PKDS key pair record

The RSA key pair that is generated can be used to encrypt and recover archive data, recover encrypted data that is transmitted to you by another party, and sign and verify data. The EC key pair can be used to sign or verify data and to perform a key agreement operation with another party.

  1. Select the 'Generate a new RSA or EC key pair record.' option. Specify the following information and press ENTER:
    • The key type: RSA, EC NIST Prime curve, or EC Brainpool curve. The RSA public exponent that is used for all keys that are generated through this service is X'010001'.
    • For RSA, the key length in bits (512, 1024, 2048, 3072, or 4096).
    • For EC, the curve size.
    • The optional private key name. Blank is the default for the private key name.
    Figure 1. Generating a new key pair using the PKDS Keys panel
    CSFPKY00 ---------------- ICSF - PKDS Keys --------------------------

COMMAND ===>

	Enter the RSA record’s label for the actions below
	==> PKDS.LABEL

	Select one of the following actions then press ENTER to process:

   S Generate a new RSA or EC key pair record. Select one key type/size.
     RSA key bit length: _ 512  _ 1024 S 2048 _ 3072 _ 4096
     EC NIST Curve 	   : _ p192 _ p224 _ p256 _ p384 _ p521
     EC Brainpool Curve: _ p160 _ p192 _ p224 _ p256 _ p320 _ p384 _ p512
     Enter Private Key Name (optional)
     ==>

   _ Delete the existing public key or key pair PKDS record

   _ Export the PKDS record’s public key to a certificate data set
     Enter the DSN ===>
     Enter desired subject’s common name (optional)
      CN=

   _ Create a PKDS public key record from an input certificate.
     Enter the DSN ===>
  2. When the Generate function is successful, the PKDS Key Request Successful panel is displayed.
    Figure 2. Successful generation of a key pair
    CSFPKY01 ------------- ICSF - PKDS Key Request Successful–---------------


  Label ==> PKDS.LABEL



  Key function completed successfully
  Press ENTER or END to return to the previous menu.

COMMAND ===>