Required commands

Edit online

The required commands for CSNBMGN2.

The MAC Generate2 verb requires the commands listed in Table 1 to be enabled in the active role based on the keyword specified for the process rule:
Table 1. CSNBMGN2 access control points

CSNBMGN2 access control points

Hash method /
Rule-array keyword

 Offset Command
AES CMAC X'0336' MAC Generate2 - AES CMAC
SHA-1 X'00E4'1) HMAC Generate - SHA-1
SHA-224 X'00E5'1) HMAC Generate - SHA-224
SHA-256 X'00E6'1) HMAC Generate - SHA-256
SHA-384 X'00E7'1) HMAC Generate - SHA-384
SHA-512 X'00E8'1) HMAC Generate - SHA-512
1) A role with this offset enabled can also use the HMAC Generate verb.

When a clear HMAC key token is specified, these access controls are not used.