Generating an operational key

There are different methods that you can use to generate an operational key.

Choose one of the following methods:
  • For operational keys, call the Key Generate (CSNBKGN) verb. Table 1 and Table 2 show the key type and key form combinations for a single key and for a key pair.
  • For data-encrypting keys, call the Random Number Generate (CSNBRNG) verb and specify the form parameter as ODD. Then pass the generated value to the Clear Key Import (CSNBCKI) verb or the Multiple Clear Key Import (CSNBCKM) verb. The DATA key type is now in operational form.

You cannot generate a PIN verification (PINVER) key in operational form because the originator of the PIN generation (PINGEN) key generates the PINVER key in exportable form, which is sent to you to be imported.