Restrictions
The restrictions for CSNBKIM.
For security reasons, a request fails by default if it uses an equal-key-halves importer to import a key with unequal key halves. You must have access control point Key Import - Unrestricted (offset X'027B') explicitly enabled if you want to import keys in this manner.
Note: As of CCA 5.4 and
CCA 6.2, this verb supports three-key
TDES keys. As a key management service this includes three-key TDES key encrypting keys
(KEKs).
TR-31 tokens can only be used with this verb starting with CCA 8.1. In addition, only the importer_key_identifier parameter accepts TR-31 tokens.