Required commands

The required commands for CSNBKIM.

This verb requires the Key Import command (offset X'0012') to be enabled in the active role.

By also enabling the Key Import - Unrestricted command (offset X'027B'), you can permit a less secure mode of operation that enables an equal key-halves IMPORTER key-encrypting key to import a key having unequal key-halves (key parity bits are ignored).

To disable the wrapping of a key with a weaker master key, the Prohibit weak wrapping - Master keys command (offset X'0333') must be enabled in the active role.

To receive a warning when wrapping a key with a weaker master key, enable the Warn when weak wrap - Master keys command (offset X'0332') in the active role. The Prohibit weak wrapping - Master keys command overrides this command.