PKDS Key Record Write Callable Service (CSNDKRW and CSNFKRW)

This service accepts an RSA or ECC private key token in either external or internal format, or an RSA or ECC public key token or trusted blocks and writes over an existing record in the PKDS. An application can check the PKDS for a null record with the label provided and overwrite this record if it does exist. Alternatively, an application can specify to overwrite a record regardless of the contents of the record.

Note: Retained keys cannot be written to the PKDS with the PKDS Key Record Write service, nor can a retained key record in the PKDS be overwritten with this service.