Required commands

If you specify the RTCMK keyword, the Key Token Change verb requires the Symmetric Key Token Change - RTCMK command (offset X'0090') to be enabled in the active role.

If you specify the REFORMAT keyword, the Key Token Change verb requires the CKDS Conversion2 - Allow use of REFORMAT command (offset X'014C') to be enabled in the active role.

If you specify the WRAP-ECB or WRAP-ENH key wrapping method, and the default key-wrapping method setting does not match this keyword, the CKDS Conversion2 - Allow wrapping override keywords command (offset X'0146') must be enabled in the active role.

If the WRAP-ECB translation-control keyword is specified, and the key in the input key token is wrapped by the enhanced wrapping method (WRAP-ENH), the verb requires the CKDS Conversion2 - Convert from enhanced to original command (offset X'0147') to be enabled. An active role with offset X'0147' enabled can also use the Key Translate2 verb to translate a key from the enhanced key-wrapping method to the less-secure legacy method.