Parameters

For the definitions of the return_code, reason_code, exit_data_length, and exit_data parameters, see Parameters common to all verbs.

rule_array_count

Direction:	Input
Type:	Integer

A pointer to an integer variable containing the number of elements in the rule_array variable. This value must be 1.

rule_array

Direction:	Input
Type:	String array

A pointer to a string variable containing an array of keywords. The keywords are eight bytes in length and must be left-aligned and padded on the right with space characters. The rule_array keywords are described in Table 1.

Table 1. Keywords for Trusted Block Create control information

Keywords for Trusted Block Create control information

Keyword	Description
Operation (One required)
INACTIVE	Create an external trusted block, based on the input_block_identifier variable, and set the active flag to B'0'. This makes the trusted block unusable in any other CCA services.
ACTIVE	Create an external trusted block, based on the token identified by the input_block_identifier parameter, and change the active flag from B'0' to B'1'. This makes the trusted block usable in other CCA services

input_block_identifier_length

Direction:	Input
Type:	Integer

A pointer to an integer variable containing the number of bytes in the input_block_identifier variable. The maximum length is 3500 bytes.

input_block_identifier

Direction:	Input
Type:	String

A pointer to a string variable containing a trusted block key-token or the key label of a trusted block key-token that has been built according to the format specified in Trusted blocks. The trusted block key-token will be updated by the verb and returned in the trusted_block_identifier variable.

When the operation is INACTIVE, the trusted block can have MAC protection (for example, due to recycling of an existing trusted block), but typically it does not.

transport_key_identifier

Direction:	Input
Type:	String

A pointer to a string variable containing an operational CCA DES key-token or the key label of an operational CCA DES key-token record. The key token must be of type IMP-PKA.

An IMP-PKA key type is an IMPORTER key-encrypting key with only its IMPORT key-usage bit (bit 21) on; its other key-usage bits (IMEX, OPIM, IMIM, and XLATE) must be off.

Note: An IMP-PKA control vector can be built using Control Vector Generate (CSNBCVG) with a key type of IMPORTER and a rule_array keyword of IMPORT.

trusted_block_identifier_length

Direction:	Input/Output
Type:	Integer

A pointer to an integer variable containing the number of bytes of data in the trusted_block_identifier variable. The maximum length is 3500 bytes. The output trusted block token can be up to seven bytes longer than the input trusted block token due to padding.

trusted_block_identifier

Direction:	Output
Type:	String

A pointer to a string variable containing a trusted block token or a label of a trusted block token returned by the verb.