Access Control Points
If an access control point is disabled, the corresponding ICSF utility will fail during execution with an access denied error.
The table includes the following columns:
- Name
- The descriptive name of the access control point. This is the name used when displaying the ICSF role from the ICSF Coprocessor Management panel.
- Utility
- The utility that requires this access control point to be enabled for operation. The name is the CSFSERV profile name that controls the utility
- Offset
- The hexadecimal offset, or access-control-point code, for the control in the domain role in the coprocessor.
- Usage
- The following abbreviations and symbols are used in this table:AE - Always enabled, cannot be disabled.
ED - Enabled by default.
DD - Disabled by default.
SC - Usage of this access control point requires special consideration.Table 1. Access control points and associated utilities Name Utility Offset (Hex) Usage Authorize UDX CSFUDM 0240 AE AES Master Key - Clear new master key register CSFDKCS 0124 ED AES Master Key - Combine key parts CSFDKCS 0126 ED AES Master Key - Load first key part CSFDKCS 0125 ED AES Master Key - Set master key CSFDKCS 0128 AE CKDS Conversion2 - Allow use of REFORMAT CSFCNV2 014C ED CKDS Conversion2 - Allow wrapping override keywords CSFCNV2 0146 AE CKDS Conversion2 - Convert from enhanced to original CSFCNV2 0147 ED DES Master Key - Clear new master key register CSFDKCS 0032 ED DES Master Key - Combine key parts CSFDKCS 0019 ED DES Master Key - Load first key part CSFDKCS 0018 ED DES master key – 24-byte key CSFDKCS 0330 DD, SC DES Master Key - Set master key CSFDKCS 001A AE ECC Master Key - Clear new master key register CSFDKCS 031F ED ECC Master Key - Combine key parts CSFDKCS 0321 ED ECC Master Key - Load first key part CSFDKCS 0320 ED ECC Master Key - Set master key CSFDKCS 0322 AE Operational Key Load CSFOPKL 0309 ED Operational Key Load - Variable-Length Tokens CSFOPKL 029E ED PCF CKDS Conversion - Allow wrapping override keywords CSFCONV 0148 ED PCF CKDS Conversion Program CSFCONV 0303 ED Reencipher CKDS CSFRENC 001E AE Reencipher CKDS2 CSFRENC 00F0 AE Reencipher PKDS CSFRENC 0241 AE RSA Master Key - Clear new master key register CSFDKCS 0060 ED RSA Master Key - Combine key parts CSFDKCS 0054 ED RSA Master Key - Load first key part CSFDKCS 0053 ED RSA Master Key - Set master key CSFDKCS 0057 AE Note: When reenciphering the CKDS, the CKDS Conversion2 - Allow wrapping override keywords access control must be enabled.