Restrictions

Edit online

The restrictions for CSNBT31I.

  • As of CCA 5.4 and CCA 6.2, this verb supports three-key TDES keys. As a key management service this includes triple-length TDES key encrypting keys (KEKs). For a list of supported triple-length TDES key types beginning with Release 5.4 and Release 6.2, see Table 1.
  • Starting with CCA Release 8.1, TR-31 key tokens can be used in the unwrap_kek_identifier and wrap_kek_identifier parameters.
  • The only partial key tokens that may be imported are DES key tokens that contain an IBM® control vector in an IBM optional block. This behavior can be prohibited by enabling the access-control point X’006F’ (T31I Disallow Partial DES Key Import with CV in IBMC01 OB)