Required commands
The CSNBDKG required commands.
This verb requires the following commands to be enabled in the active role based on the keyword specified for the process rule:
| Rule-array keyword | Offset | Command |
|---|---|---|
| CLR8-ENC | X'0040' | Diversified Key Generate - CLR8-ENC |
| SESS-XOR | X'0043' | Diversified Key Generate - SESS-XOR |
| TDES-DEC | X'0042' | Diversified Key Generate - TDES-DEC |
| TDES-ENC | X'0041' | Diversified Key Generate - TDES-ENC |
| TDES-XOR | X'0045' | Diversified Key Generate - TDES-XOR |
| TDESEMV2 or TDESEMV4 | X'0046' | Diversified Key Generate - TDESEMV2/TDESEMV4 |
| A28OWFEC | X'03B9' | Diversified Key Generate - A28OWFEC |
| A28OWFCL | X'03BA' | Diversified Key Generate - A28OWFCL |
| A28XOREC | X'03BB' | Diversified Key Generate - A28XOREC |
| WRAP-ECB or WRAP-ENH and default key-wrapping method setting does not match keyword | X'013D' | Diversified Key Generate - Allow wrapping override keywords |
When a key-generating key of key type DKYGENKY is specified with control vector bits (19 - 22) of B'1111', the Diversified Key Generate - DKYGENKY - DALL command (offset X'0290') must also be enabled in the active role.
Note: A role with offset X'0290' enabled can also use the PIN Change/Unblock verb with a
DALL key.
When using the TDES-ENC or TDES-DEC modes, you can specifically enable generation of a single-length key or a double-length key with equal key-halves (an effective single-length key) by enabling the Diversified Key Generate - Single length or same halves command (offset X'0044').