Restrictions
The restrictions for CSNBPTR2.
- When keyword PAN-CHG is specified in the rule array and required command Encrypted PIN Translate2 - Permit ISO-4 to ISO-4 PTR2AUTH (offset X'0395') is enabled in the active role, the AES MAC key identified by the authentication_key_identifier parameter must have key usage PTR2AUTH. This is the key to be used to verify the CMAC in the authentication data for ISO-4 to ISO-4 PAN change.
- This verb supports three-key TDES keys. As a key management service this includes triple-length TDES key encrypting keys (KEKs). For a list of supported triple-length TDES key types, see Table 1.
- Support for the Disallow ISO-2 PIN block translate command (offset X'0087') is not available prior to Release 7.5.
- TR-31 tokens can only be used with this verb starting with CCA Release 8.1.