Restrictions

Edit online

The restrictions for CSNBKGN2.

  • The generation of a pair of operational AES PINPROT keys (OPOP), where one PINPROT key has usage of ENCRYPT, REFORMAT, NOFLDFMT, and ISO-4, and the other PINPROT key has usage of DECRYPT, EPINVER, NOFLDFMT, and ISO-4, is not supported in releases before Release 5.6.
  • The Allow GEN of OPOP EPVR/OPIN Key Pair command (offset X'039D') is not supported in releases before Release 5.6.
  • TR-31 tokens can only be used with this verb starting with CCA 8.1. In addition, only the kek_key_identifier_1 and kek_key_identifier_2 parameters accept TR-31 tokens.