Prohibit Export Extended (CSNBPEXX)

Edit online

Use this verb to modify an exportable external fixed-length CCA DES key-token so that its key can no longer be exported. That is, this verb sets CV bit 17 = B'0' (NO-XPORT).

This verb performs the following functions:
  • Multiply deciphers the source key under a key formed by the XOR of the source key’s control vector and the specified key-encrypting key (KEK).
  • Turns from on to off the XPORT-OK bit in the source key’s control vector (bit 17).
  • Multiply enciphers the key under a key formed by the XOR of the KEK key and the source key’s modified control vector. The encrypted key and the modified control vector are stored in the source-key key token, and the TVV is updated.
Notes:
  • This verb supports PCI-HSM 2016 compliant-tagged key tokens.
  • This service has been deprecated. New applications should use the CSNBRKA service that is described in Restrict Key Attribute (CSNBRKA).

This verb does not need to document any Usage notes.