Usage Notes

Clear keys may not be used to wrap secure keys and vice versa. (See z/OS Cryptographic Services ICSF Writing PKCS #11 Applications for the more information on clear keys and secure keys.)

One exception, clear RSA public keys may be used to perform non-attribute bound wrap of secure secret keys.

For Attribute Bound wrapping, all keys involved (source, wrapping, and signing) must have the CKA_IBM_ATTRBOUND attribute set TRUE