Required commands

The required commands for CSNDT34D.

This verb requires the following commands to be enabled in the active role:

Access control points for TR-34 Key Distribution
Rule array keyword	Offset	Command
2PASSCRE	X'01FA'	TR-34 Key Distribution - allow 2PASSCRE
1PASSCRE	X'01FB'	TR-34 Key Distribution - allow 1PASSCRE
PKI-NONE	X'01FF'	Permit X.509 without PKI root validation
CRLEXPAL	X'003D'	TR-34 - Allow expired CRL
RCTEXPAL	X'003E'	TR-34 - Allow expired KRD Certificate

Table 1. Valid CCA to TR-34 Export Translations and required commands
Valid CCA to TR-34 Export Translations and Required Access Controls. This table contains columns for TR-31 key usage keyword, Access control name, Offset (hex), and Specific key type and control vector attributes and a row for "K0" and "K1": TR-31 key encryption or wrapping, or key block protection keys.
TR-31 key usage keyword	Command	Offset (hex)	Specific key type and control vector attributes
"K0" and "K1": TR-31 key encryption or wrapping, or key block protection keys
KEK KEK-WRAP	TR-34 Key Distribution - permit DES EXPORTER to K0 or K1	X'0242'	See Table 5.
KEK KEK-WRAP	TR-34 Key Distribution - permit DES IMPORTER to K0 or K1	X'0243'	See Table 5.
KEK	TR-34 Key Distribution - permit AES EXPORTER to K0	X'0244'	See Table 6.
KEK KEK-WRAP	TR-34 Key Distribution - permit AES EXPORTER to K1	X'0245'
KEK	TR-34 Key Distribution - permit AES IMPORTER to K0	X'0246'
KEK KEK-WRAP	TR-34 Key Distribution - permit AES IMPORTER to K1	X'0247'