Required commands
The required commands for CSNBKYT2.
In order to access key storage, this verb also requires the Compute Verification Pattern command (offset X'001D') to be enabled in the active role.
The commands shown in Table 1 must be enabled in the active role for each combination of KVP calculation algorithm and token algorithms:
Some of the verification pattern calculation algorithm or process rule keywords require an additional access control point to be enabled. Keywords not in the table are always applicable.
| Key verification pattern calculation | Token algorithm | Offset | Command |
|---|---|---|---|
| ENC-ZERO | AES | X'0021' | Key Test2 - AES, ENC-ZERO (not required for algorithm keyword DES) |
| CMACZERO | AES | X'0022' | Key Test2 - AES, CMACZERO |
| CMACZERO | DES | X'0023' | Key Test2 - DES, CMACZERO |
| KEY_LEN | AES | X'003B' | Key Test2 - AES, KEY-LEN |
| KEY_LEN | DES | X'003C' | Key Test2 - DES, KEY-LEN |