Required commands
The required commands for CSNBKPI2.
This verb requires the following commands to be enabled in the active role:
| Rule-array keyword | Offset | Command |
|---|---|---|
| FIRST and MIN3PART | X'0297' | Key Part Import2 - Load first key part, require 3 key parts |
| FIRST and MIN2PART | X'0298' | Key Part Import2 - Load first key part, require 2 key parts |
| FIRST and MIN1PART | X'0299' | Key Part Import2 - Load first key part, require 1 key parts |
| ADD-PART | X'029A' | Key Part Import2 - Add second of 3 or more key parts |
| X'029B' | Key Part Import2 - Add last required key part | |
| X'029C' | Key Part Import2 - Add optional key part | |
| COMPLETE | X'029D' | Key Part Import2 - Complete key |
In order to import a clear key part into a TR-31 key block header you must ensure that the KPI2 - Allow TR-31 clear key import command (offset X’03BC’) is enabled in the active role.
To disable the wrapping of a key with a weaker master key, the Prohibit weak wrapping - Master keys command (offset X'0333') must be enabled in the active role.
To receive a warning when wrapping a key with a weaker master key, enable the Warn when weak wrap - Master keys command (offset X'0332') in the active role. The Prohibit weak wrapping - Master keys command overrides this command.