Security API command and sub-command codes
View an alphabetical list of security API command and sub-command codes returned by the output rule-array for option STATDIAG of the Cryptographic Facility Query verb.
Elements 9, 11, 13, 15, and 17 contain these API command
and sub-command codes to indicate the last five commands run. See Table 2.
Note: The
security API command is T2 padded on the right with 2
space characters, and the subcommand code is a 2-byte uppercase alphabetic
value padded on the right with 2 space characters.
| Security API command code | Subcommand code | Description |
|---|---|---|
| T2 | AD | Symmetric Algorithm Decipher (CSNBSAD) |
| T2 | AE | Symmetric Algorithm Encipher (CSNBSAE) |
| T2 | AK | Diversified Key Generate2 (CSNBDKG2) |
| T2 | AM | Access Control Maintenance (CSUAACM) |
| T2 | AP | Authentication Parameter Generate (CSNBAPG) |
| T2 | BE | Format Preserving Algorithms Encipher (CSNBFFXE) |
| T2 | BD | Format Preserving Algorithms Decipher (CSNBFFXD) |
| T2 | BT | Format Preserving Algorithms Translate (CSNBFFXT) |
| T2 | CA | Cryptographic Resource Allocate (CSUACRA) |
| T2 | CD | Cryptographic Resource Deallocate (CSUACRD) |
| T2 | CI | Data Key Import (CSNBCKI) |
| T2 | CM | Multiple Clear Key Import (CSNBCKM) |
| T2 | CT | Key Token Change (CSNBKTC) |
| T2 | CU | DK PRW Card Number Update2 (CSNBDCU2) |
| T2 | CV | MAC Generate2 (CSNBMGN2) |
| T2 | CX | Control Vector Translate (CSNBCVT) |
| T2 | CY | Key Token Change2 (CSNBKTC2) |
| T2 | DA | DK Deterministic Generate (CSNBDDPG) |
| T2 | DB | DK PAN Translate (CSNBDPT) |
| T2 | DC | Decipher (CSNBDEC) |
| T2 | DE | Data Key Export (CSNBDKX) |
| T2 | DG | Diversify Directed Key (CSNBDDK) |
| T2 | DH | Elliptic Curve Diffie-Hellman (CSNDEDH) |
| T2 | DI | Data Key Import (CSNBDKM) |
| T2 | DK | Retained Key Delete (CSNDRKD) |
| T2 | DM | DK PRW CMAC Generate (CSNBDPCG) |
| T2 | DN | DK PIN Change (CSNBDPC) |
| T2 | DQ | DK Migrate PIN (CSNBDMP) |
| T2 | DR | DK Random PIN Generate (CSNBDRPG) |
| T2 | DS | Symmetric Key Export with Data (CSNDSXD) |
| T2 | DT | DK PAN Modify in Transaction (CSNBDPMT) |
| T2 | DU | DK PRW Card Number Update (CSNBDPNU) |
| T2 | DV | DK PIN Verify (CSNBDPV) |
| T2 | DW | DK Regenerate PRW (CSNBDRP) |
| T2 | EC | Encipher (CSNBENC) |
| T2 | EP | Encrypted PIN Generate (CSNBEPG) |
| T2 | EX | Prohibit Export Extended (CSNBPEXX) |
| T2 | EY | Restrict Key Attribute (CSNBRKA) |
| T2 | FQ | Cryptographic Facility Query (CSUACFQ) |
| T2 | GC | MAC Verify2 (CSNBMVR2) |
| T2 | GD | Diversified Key Generate (CSNBDKG) |
| T2 | GH | HMAC Generate (CSNBHMG) - SHA-1, SHA-224, SHA-256 |
| T2 | GK | Key Generate2 (CSNBKGN2) |
| T2 | GL | HMAC Generate (CSNBHMG) - SHA-384, SHA-512 |
| T2 | GM | MDC Generate (CSNBMDG) |
| T2 | GS | Symmetric Key Generate (CSNDSYG) |
| T2 | IP | Key Part Import2 (CSNBKPI2) |
| T2 | KC | PKA Public Key Register (CSNDPKR) |
| T2 | KE | Key Export (CSNBKEX) |
| T2 | KG | Key Generate (CSNBKGN) |
| T2 | KI | Key Import (CSNBKIM) |
| T2 | KN | Key Translate2 (CSNBKTR2) |
| T2 | KP | Key Part Import (CSNBKPI) |
| T2 | KR | Key Translate (CSNBKTR) |
| T2 | KT | Key Test (CSNBKYT) |
| T2 | KX | Key Test Extended (CSNBKYTX) |
| T2 | KY | Key Test2 (CSNBKYT2) |
| T2 | LK | Retained Key List (CSNDRKL) |
| T2 | LQ | Log Query (CSUALGQ) |
| T2 | MG | MAC Generate (CSNBMGN) |
| T2 | MP | Master Key Process (CSNBMKP) |
| T2 | MV | MAC Verify (CSNBMVR) |
| T2 | OH | One-Way Hash (CSNBOWH) |
| T2 | PA | Clear PIN Generate Alternate (CSNBCPA) |
| T2 | PC | Clear PIN Generate (CSNBPGN) |
| T2 | PD | PKA Decrypt (CSNDPKD) |
| T2 | PE | Clear PIN Encrypt (CSNBCPE) |
| T2 | PG | PKA Key Generate (CSNDPKG) |
| T2 | PI | PKA Key Import (CSNDPKI) |
| T2 | PK | PKA Encrypt (CSNDPKE) |
| T2 | PO | Recover PIN from Offset (CSNBPFO) |
| T2 | PR | Encrypted PIN Translate2 (CSNBPTR2) |
| T2 | PT | Encrypted PIN Translate (CSNBPTR) |
| T2 | PU | PIN Change/Unblock (CSNBPCU) |
| T2 | PV | Encrypted PIN Verify (CSNBPVR) |
| T2 | PX | Data Key Export (CSNBPEX) |
| T2 | RB | TR-34 Bind-Begin (CSNDT34B) |
| T2 | RC | TR-34 Bind-Complete (CSNDT34C) |
| T2 | RD | TR-34 Key Distribution (CSNDT34D) |
| T2 | TR | TR31 Key Create (CSNBT31C) |
| T2 | RE | TR31 Translate (CSNBT31X) |
| T2 | RG | Random Number Generate (CSNBRNGL) |
| T2 | RI | TR31 Key Import (CSNBT31I) |
| T2 | RK | Remote Key Export (CSNDRKX) |
| T2 | RL | Random Number Generate Long (CSNBRNGL) |
| T2 | RP | DK Random PIN Generate2 (CSNBDRG2) |
| T2 | RR | TR-34 Key Receive (CSNDT34R) |
| T2 | RT | Random Number Tests (CSUARNT) |
| T2 | SG | Digital Signature Generate (CSNDDSG) |
| T2 | SI | Symmetric Key Import (CSNDSYI) |
| T2 | SJ | Symmetric Key Import2 (CSNDSYI2) |
| T2 | SP | Secure Messaging for PINs (CSNBSPN) |
| T2 | SV | Digital Signature Verify (CSNDDSV) |
| T2 | SX | Symmetric Key Export (CSNDSYX) |
| T2 | SY | Secure Messaging for Keys (CSNBSKY) |
| T2 | TB | Trusted Block Create (CSNDTBC) |
| T2 | TC | PKA Key Token Change (CSNDKTC) |
| T2 | TK | PKA Key Translate (CSNDPKT) |
| T2 | TT | Cipher Text Translate2 (CSNBCTT2) |
| T2 | TV | Transaction Validation (CSNBTRV) |
| T2 | UD | Unique Key Derive (CSNBUKD) |
| T2 | VC | CVV Key Combine (CSNBCKC) |
| T2 | VE | Cryptographic Variable Encipher (CSNBCVE) |
| T2 | VG | CVV Generate (CSNBCSG) |
| T2 | VH | HMAC Verify (CSNBHMV) - SHA-1, SHA-224, SHA-256 |
| T2 | VL | HMAC Verify (CSNBHMV - SHA-384, SHA-512 |
| T2 | VV | CVV Verify (CSNBCSV) |