To generate an exportable key form, call the key generate callable service (CSNBKGN).
If you want a DATA, DECIPHER, ENCIPHER, MAC, PINGEN, DATAM, or DATAC key type in exportable form, obtain it directly by generating a single key. If you want any other key type in exportable form, request a key pair where either the first or second key type is exportable (EX). Discard the generated key form that you do not need.