Restrictions

This verb supports three-key TDES keys. As a key management service this includes three-key TDES key encrypting keys (KEKs).

Starting with CCA 8.1, the key_identifier parameter can be an internal or external TR-31 token. And the key_encrypting_key_identifier can use TR-31 KEKs.