Object authorities that are required for SAPI
Refer to the table for information regarding the object authorities that SAPI requires for restricting the availability of system resources by setting up the Cryptographic Coprocessor on your system running the IBM i operating system.
| SAPI | *USE for device | *USE for DES keystore4 | *CHANGE for DES keystore4 | *USE for PKA keystore5 | *CHANGE for PKA keystore5 | *USE for AES Keystore6 | *CHANGE for AES Keystore6 |
|---|---|---|---|---|---|---|---|
| CSNBAKRC | Y | ||||||
| CSNBAKRD | Y | ||||||
| CSNBAKRL | Y | ||||||
| CSNBAKRR | Y | ||||||
| CSNBAKRW | Y | ||||||
| CSNBCKC | Y | Y1 | |||||
| CSNBCKI | Y | Y1 | |||||
| CSNBCKM | Y | Y1 | |||||
| CSNBCPA | Y | Y1 | |||||
| CSNBCPE | Y | Y1 | |||||
| CSNBCSG | Y | Y1 | |||||
| CSNBCSV | Y | Y1 | |||||
| CSNBCVE | Y | Y1 | |||||
| CSNBCVG | |||||||
| CSNBCVT | Y | Y1 | |||||
| CSNBDEC | Y | Y1 | |||||
| CSNBDKG | Y | Y1 | |||||
| CSNBDKM | Y | Y2 | Y2 | ||||
| CSNBDKX | Y | Y1 | |||||
| CSNBENC | Y | Y1 | |||||
| CSNBEPG | Y | Y1 | |||||
| CSNBHMG | Y | Y1 | |||||
| CSNBHMV | Y | Y1 | |||||
| CSNBKET | Y | ||||||
| CSNBKEX | Y | Y1 | |||||
| CSNBKGN | Y | Y2 | Y2 | ||||
| CSNBKGN2 | Y | Y1 | |||||
| CSNBKPI | Y | Y1 | |||||
| CSNBKPI2 | Y | Y1 | |||||
| CSNBKRC | Y | Y | |||||
| CSNBKRD | Y | Y | |||||
| CSNBKRL | Y | Y | |||||
| CSNBKRR | Y | Y | |||||
| CSNBKRW | Y | Y | |||||
| CSNBKSI | Y3 | Y3 | Y3 | ||||
| CSNBKTB2 | |||||||
| CSNBKTC | Y | Y1 | |||||
| CSNBKTC2 | Y | Y1 | |||||
| CSNBKTP | |||||||
| CSNBKTP2 | |||||||
| CSNBKTR | Y | Y1 | |||||
| CSNBKTR2 | Y | Y1 | Y1 | ||||
| CSNBKYT | Y | Y1 | |||||
| CSNBKYT2 | Y | Y1 | |||||
| CSNBKYTX | Y | Y1 | |||||
| CSNBMDG | Y | ||||||
| CSNBMGN | Y | Y1 | |||||
| CSNBMKP | Y | ||||||
| CSNBOWH | |||||||
| CSNBPCU | Y | Y1 | |||||
| CSNBPEX | Y | Y1 | |||||
| CSNBPEXX | Y | Y1 | |||||
| CSNBPGN | Y | Y1 | |||||
| CSNBSPN | Y | Y1 | |||||
| CSNBPTR | Y | Y1 | |||||
| CSNBPVR | Y | Y1 | |||||
| CSNBRKA | Y | Y2 | Y2 | Y1 | Y1 | ||
| CSNBRKX | Y | Y1 | |||||
| CSNBSAD | Y | Y1 | |||||
| CSNBSAE | Y | Y1 | |||||
| CSNBSKY | Y | Y1 | |||||
| CSNBSYI2 | Y | Y2 | Y2 | ||||
| CSNBTRV | Y | Y | |||||
| CSNBT31I | Y | Y2 | Y2 | ||||
| CSNBT31O | |||||||
| CSNBT31R | |||||||
| CSNBT31X | Y | Y1 | |||||
| CSNBTBC | Y | Y1 | |||||
| CSNDDSG | Y | Y1 | |||||
| CSNDDSV | Y | Y1 | |||||
| CSNDEDH | Y | Y1 | |||||
| CSNDKRC | Y | ||||||
| CSNDKRD | Y | ||||||
| CSNDKRL | Y | ||||||
| CSNDKRR | Y | ||||||
| CSNDKRW | Y | ||||||
| CSNDKTC | Y | Y1 | |||||
| CSNDPKB | |||||||
| CSNDPKG | Y | Y1 | Y1 | ||||
| CSNDPKH | Y | ||||||
| CSNDPKI | Y | Y1 | Y1 | ||||
| CSNDPKR | Y | ||||||
| CSNDPKT | Y | Y1 | Y1 | ||||
| CSNDPKX | Y | Y1 | |||||
| CSNDRKD | Y | ||||||
| CSNDRKL | Y | ||||||
| CSNDSBC | Y | Y1 | |||||
| CSNDSBD | Y | Y1 | |||||
| CSNDSYG | Y | Y1 | |||||
| CSNDSYI | Y | Y1 | Y1 | ||||
| CSNDSYX | Y | Y1 | Y1 | ||||
| CSUAACI | Y | ||||||
| CSUAACM | Y | ||||||
| CSUACFC | Y | ||||||
| CSUACFQ | Y | ||||||
| CSUACRA | Y | ||||||
| CSUACRD | Y | ||||||
| CSUAKSD | |||||||
| CSUALCT | Y | ||||||
| CSUAMKD | Y | ||||||
| CSUARNT | Y |
1Use of AES or Data Encryption Standard (DES) or public key algorithm (PKA) keystore for this API is optional.
2More than one parameter may optionally use keystore. The authority requirements differ on each of those parameters.
3The Key_Store_Initialize SAPI does not require authority to all three files simultaneously.
4*USE authority for the DES keystore library is required if *USE or *CHANGE authority is required for the DES keystore.
5*USE authority for the PKA keystore library is required if *USE or *CHANGE authority is required for the PKA keystore.
6*USE authority for the AES keystore library is required if *USE or *CHANGE authority is required for the AES keystore.