Resource names for CCA and ICSF entry points

Table 1. Resource names for CCA and ICSF entry points
Descriptive service name CCA entry point names ICSF entry point names SAF resource name Callable service exit name
  31-bit 64-bit 31-bit 64-bit    
Authentication Parameter Generate CSNBAPG CSNEAPG CSFAPG CSFAPG6 CSFAPG CSFAPG
Cipher Text Translate2 CSNBCTT2 CSNECTT2 CSFCTT2 CSFCTT26 CSFCTT2 CSFCTT2
Cipher Text Translate2 CSNBCTT3 CSNECTT3 CSFCTT3 CSFCTT36 CSFCTT3 CSFCTT3
CKDS Key Record Create CSNBKRC CSNEKRC CSFKRC CSFKRC6 CSFKRC CSFKRC
CKDS Key Record Create2 CSNBKRC2 CSNEKRC2 CSFKRC2 CSFKRC26 CSFKRC2 CSFKRC2
CKDS Key Record Delete CSNBKRD CSNEKRD CSFKRD CSFKRD6 CSFKRD CSFKRD
CKDS Key Record Read CSNBKRR CSNEKRR CSFKRR CSFKRR6 CSFKRR CSFKRR
CKDS Key Record Read2 CSNBKRR2 CSNEKRR2 CSFKRR2 CSFKRR26 CSFKRR2 CSFKRR2
CKDS Key Record Write CSNBKRW CSNEKRW CSFKRW CSFKRW6 CSFKRW CSFKRW
CKDS Key Record Write2 CSNBKRW2 CSNEKRW2 CSFKRW2 CSFKRW26 CSFKRW2 CSFKRW2
Clear Key Import CSNBCKI CSNECKI CSFCKI CSFCKI6 CSFCKI CSFCKI
Clear PIN Encrypt CSNBCPE CSNECPE CSFCPE CSFCPE6 CSFCPE CSFCPE
Clear PIN Generate CSNBPGN CSNEPGN CSFPGN CSFPGN6 CSFPGN CSFPGN
Clear PIN Generate Alternate CSNBCPA CSNECPA CSFCPA CSFCPA6 CSFCPA CSFCPA
Control Vector Generate CSNBCVG CSNECVG CSFCVG CSFCVG6 N/A N/A
Control Vector Translate CSNBCVT CSNECVT CSFCVT CSFCVT6 CSFCVT CSFCVT
Coordinated KDS Administration N/A N/A CSFCRC CSFCRC6 CSFCRC N/A
Cryptographic Usage Statistic N/A N/A CSFSTAT CSFSTAT6 N/A N/A
Cryptographic Variable Encipher CSNBCVE CSNECVE CSFCVE CSFCVE6 CSFCVE CSFCVE
CVV Key Combine CSNBCKC CSNECKC CSFCKC CSFCKC6 CSFCKC CSFCKC
Data Key Export CSNBDKX CSNEDKX CSFDKX CSFDKX6 CSFDKX CSFDKX
Data Key Import CSNBDKM CSNEDKM CSFDKM CSFDKM6 CSFDKM CSFDKM
Decipher CSNBDEC CSNEDEC CSFDEC CSFDEC6 CSFDEC CSFDEC
Decipher CSNBDEC1 CSNEDEC1 CSFDEC1 CSFDEC16 CSFDEC1 CSFDEC1
Decode CSNBDCO CSNEDCO CSFDCO CSFDCO6 CSFDCO CSFDCO
Derive ICC MK CSNBDCM CSNEDCM CSFDCM CSFDCM6 CSFDCM CSFDCM
Derive Session Key CSNBDSK CSNEDSK CSFDSK CSFDSK6 CSFDSK CSFDSK
Digital Signature Generate CSNDDSG CSNFDSG CSFDSG CSFDSG6 CSFDSG CSFDSG
Digital Signature Verify CSNDDSV CSNFDSV CSFDSV CSFDSV6 CSFDSV CSFDSV
Diversified Key Generate CSNBDKG CSNEDKG CSFDKG CSFDKG6 CSFDKG CSFDKG
Diversified Key Generate2 CSNBDKG2 CSNEDKG2 CSFDKG2 CSFDKG26 CSFDKG2 CSFDKG2
Diversify Directed Key CSNBDDK CSNEDDK CSFDDK CSFDDK6 CSFDDK CSFDDK
DK Deterministic PIN Generate CSNBDDPG CSNEDDPG CSFDDPG CSFDDPG6 CSFDDPG CSFDDPG
DK Migrate PIN CSNBDMP CSNEDMP CSFDMP CSFDMP6 CSFDMP CSFDMP
DK PAN Modify in Transaction CSNBDPMT CSNEDPMT CSFDPMT CSFDPMT6 CSFDPMT CSFDPMT
DK PAN Translate CSNBDPT CSNEDPT CSFDPT CSFDPT6 CSFDPT CSFDPT
DK PIN Change CSNBDPC CSNEDPC CSFDPC CSFDPC6 CSFDPC CSFDPC
DK PIN Verify CSNBDPV CSNEDPV CSFDPV CSFDPV6 CSFDPV CSFDPV
DK PRW Card Number Update CSNBDPNU CSNEDPNU CSFDPNU CSFDPNU6 CSFDPNU CSFDPNU
DK PRW Card Number Update2 CSNBDCU2 CSNBECU2 CSFDCU2 CSFDCU26 CSFDCU2 CSFDCU2
DK PRW CMAC Generate CSNBDPCG CSNEDPCG CSFDPCG CSFDPCG6 CSFDPCG CSFDPCG
DK Random PIN Generate CSNBDRPG CSNEDRPG CSFDRPG CSFDRPG6 CSFDRPG CSFDRPG
DK Random PIN Generate2 CSNBDRG2 CSNBERG2 CSFDRG2 CSFDRG26 CSFDRG2 CSFDRG2
DK Regenerate PRW CSNBDRP CSNEDRP CSFDRP CSFDRP6 CSFDRP CSFDRP
ECC Diffie-Hellman CSNDEDH CSNFEDH CSFEDH CSFEDH6 CSFEDH CSFEDH
EMV Scripting Service CSNBESC CSNEESC CSFESC CSFESC6 CSFESC CSFESC
EMV Transaction (ARQC/ARPC) Service CSNBEAC CSNEEAC CSFEAC CSFEAC6 CSFEAC CSFEAC
EMV Verification Functions CSNBEVF CSNEEVF CSFEVF CSFEVF6 CSFEVF CSFEVF
Encipher CSNBENC CSNEENC CSFENC CSFENC6 CSFENC CSFENC
Encipher CSNBENC1 CSNEENC1 CSFENC1 CSFENC16 CSFENC1 CSFENC1
Encode CSNBECO CSNEECO CSFECO CSFECO6 CSFECO CSFECO
Encrypted PIN Generate CSNBEPG CSNEEPG CSFEPG CSFEPG6 CSFEPG CSFEPG
Encrypted PIN Translate CSNBPTR CSNEPTR CSFPTR CSFPTR6 CSFPTR CSFPTR
Encrypted PIN Translate2 CSNBPTR2 CSNEPTR2 CSFPTR2 CSFPTR26 CSFPTR2 CSFPTR2
Encrypted PIN Translate Enhanced CSNBPTRE CSNEPTRE CSFPTRE CSFPTRE6 CSFPTRE CSFPTRE
Encrypted PIN Verify CSNBPVR CSNEPVR CSFPVR CSFPVR6 CSFPVR CSFPVR
Field Level Decipher CSNBFLD CSNEFLD CSFFLD CSFFLD6 N/A N/A
Field Level Encipher CSNBFLE CSNEFLE CSFFLE CSFFLE6 N/A N/A
FPE Decipher CSNBFPED CSNEFPED CSFFPED CSFFPED6 CSFFPED CSFFPED
FPE Encipher CSNBFPEE CSNEFPEE CSFFPEE CSFFPEE6 CSFFPEE CSFFPEE
FPE Translate CSNBFPET CSNEFPET CSFFPET CSFFPET6 CSFFPET CSFFPET
Generate Issuer MK CSNBGIM CSNEGIM CSFGIM CSFGIM6 CSFGIM CSFGIM
HMAC Generate CSNBHMG CSNEHMG CSFHMG CSFHMG6 CSFHMG CSFHMG
HMAC Generate CSNBHMG1 CSNEHMG1 CSFHMG1 CSFHMG16 CSFHMG1 CSFHMG1
HMAC Verify CSNBHMV CSNEHMV CSFHMV CSFHMV6 CSFHMV CSFHMV
HMAC Verify CSNBHMV1 CSNEHMV1 CSFHMV1 CSFHMV16 CSFHMV1 CSFHMV1
ICSF Multi-Purpose Service N/A N/A CSFMPS CSFMPS6 CSFMPS CSFMPS
ICSF Query Algorithm N/A N/A CSFIQA CSFIQA6 CSFIQA N/A
ICSF Query Facility N/A N/A CSFIQF CSFIQF6 CSFIQF N/A
ICSF Query Facility2 N/A N/A CSFIQF2 CSFIQF26 N/A CSFIQF2
Key Data Set List N/A N/A CSFKDSL CSFKDSL6 CSFKDSL CSFKDSL
Key Data Set Metadata Read N/A N/A CSFKDMR CSFKDMR6 CSFKDMR CSFKDMR
Key Data Set Metadata Write N/A N/A CSFKDMW CSFKDMW6 CSFKDMW CSFKDMW
Key Data Set Record Retrieve N/A N/A CSFRRT CSFRRT6 CSFRRT (see notes) N/A
Key Data Set Update N/A N/A CSFKDU CSFKDU6 CSFKDU (see notes) N/A
Key Encryption Translate CSNBKET CSNEKET CSFKET CSFKET6 CSFKET CSFKET
Key Export CSNBKEX CSNEKEX CSFKEX CSFKEX6 CSFKEX CSFKEX
Key Generate CSNBKGN CSNEKGN CSFKGN CSFKGN6 CSFKGN CSFKGN
Key Generate2 CSNBKGN2 CSNEKGN2 CSFKGN2 CSFKGN26 CSFKGN2 CSFKGN2
Key Import CSNBKIM CSNEKIM CSFKIM CSFKIM6 CSFKIM CSFKIM
Key Part Import CSNBKPI CSNEKPI CSFKPI CSFKPI6 CSFKPI CSFKPI
Key Part Import2 CSNBKPI2 CSNEKPI2 CSFKPI2 CSFKPI26 CSFKPI2 CSFKPI2
Key Test CSNBKYT CSNEKYT CSFKYT CSFKYT6 CSFKYT CSFKYT
Key Test2 CSNBKYT2 CSNEKYT2 CSFKYT2 CSFKYT26 CSFKYT2 CSFKYT2
Key Test Extended CSNBKYTX CSNEKYTX CSFKYTX CSFKYTX6 CSFKYTX CSFKYTX
Key Token Build CSNBKTB CSNEKTB CSFKTB CSFKTB6 N/A N/A
Key Token Build2 CSNBKTB2 CSNEKTB2 CSFKTB2 CSFKTB26 N/A N/A
Key Token Wrap N/A N/A CSFWRP CSFWRP6 CSFWRP N/A
Key Translate CSNBKTR CSNEKTR CSFKTR CSFKTR6 CSFKTR CSFKTR
Key Translate2 CSNBKTR2 CSNEKTR2 CSFKTR2 CSFKTR26 CSFKTR2 CSFKTR2
MAC Generate CSNBMGN CSNEMGN CSFMGN CSFMGN6 CSFMGN CSFMGN
MAC Generate CSNBMGN1 CSNEMGN1 CSFMGN1 CSFMGN16 CSFMGN1 CSFMGN1
MAC Generate2 CSNBMGN2 CSNEMGN2 CSFMGN2 CSFMGN26 CSFMGN2 CSFMGN2
MAC Generate2 CSNBMGN3 CSNEMGN3 CSFMGN3 CSFMGN36 CSFMGN3 CSFMGN3
MAC Verify CSNBMVR CSNEMVR CSFMVR CSFMVR6 CSFMVR CSFMVR
MAC Verify CSNBMVR1 CSNEMVR1 CSFMVR1 CSFMVR16 CSFMVR1 CSFMVR1
MAC Verify2 CSNBMVR2 CSNEMVR2 CSFMVR2 CSFMVR26 CSFMVR2 CSFMVR2
MAC Verify2 CSNBMVR3 CSNEMVR3 CSFMVR3 CSFMVR36 CSFMVR3 CSFMVR3
MDC Generate CSNBMDG CSNEMDG CSFMDG CSFMDG6 CSFMDG CSFMDG
MDC Generate CSNBMDG1 CSNEMDG1 CSFMDG1 CSFMDG16 CSFMDG1 CSFMDG1
Multiple Clear Key Import CSNBCKM CSNECKM CSFCKM CSFCKM6 CSFCKM CSFCKM
Multiple Secure Key Import CSNBSKM CSNESKM CSFSKM CSFSKM6 CSFSKM CSFSKM
One-Way Hash Generate CSNBOWH CSNEOWH CSFOWH CSFOWH6 CSFOWH CSFOWH
One-Way Hash Generate CSNBOWH1 CSNEOWH1 CSFOWH1 CSFOWH16 CSFOWH1 CSFOWH1
PCI Interface N/A N/A CSFPCI CSFPCI6 CSFPCI CSFPCI
PIN Change/Unblock CSNBPCU CSNEPCU CSFPCU CSFPCU6 CSFPCU CSFPCU
PKA Decrypt CSNDPKD CSNFPKD CSFPKD CSFPKD6 CSFPKD CSFPKD
PKA Encrypt CSNDPKE CSNFPKE CSFPKE CSFPKE6 CSFPKE CSFPKE
PKA Key Generate CSNDPKG CSNFPKG CSFPKG CSFPKG6 CSFPKG CSFPKG
PKA Key Import CSNDPKI CSNFPKI CSFPKI CSFPKI6 CSFPKI CSFPKI
PKA Key Token Build CSNDPKB CSNFPKB CSFPKB CSFPKB6 N/A N/A
PKA Key Token Change CSNDKTC CSNFKTC CSFPKTC CSFPKTC6 CSFPKTC CSFPKTC
PKA Key Translate CSNDPKT CSNFPKT CSFPKT CSFPKT6 CSFPKT CSFPKT
PKA Public Key Extract CSNDPKX CSNFPKX CSFPKX CSFPKX6 CSFPKX CSFPKX
PKCS #11 Derive Key N/A N/A CSFPDVK CSFPDVK6 CSF1DVK1 N/A
PKCS #11 Derive Multiple Keys N/A N/A CSFPDMK CSFPDMK6 CSF1DMK1 N/A
PKCS #11 Generate Keyed MAC N/A N/A CSFPHMG CSFPHMG6 CSF1HMG1 N/A
PKCS #11 Generate Key Pair N/A N/A CSFPGKP CSFPGKP6 CSF1GKP1 N/A
PKCS #11 Generate Secret Key N/A N/A CSFPGSK CSFPGSK6 CSF1GSK1 N/A
PKCS #11 Get Attribute Value N/A N/A CSFPGAV CSFPGAV6 CSF1GAV1 N/A
PKCS #11 One-Way Hash, Sign, or Verify N/A N/A CSFPOWH CSFPOWH6 CSFOWH N/A
PKCS #11 Private Key Sign N/A N/A CSFPPKS CSFPPKS6 CSF1PKS1 N/A
PKCS #11 Private Key Structure Decrypt N/A N/A CSFPPD2 CSFPPD26 CSFPKD N/A
PKCS #11 Private Key Structure Sign N/A N/A CSFPPS2 CSFPPS26 CSFDSG N/A
PKCS #11 Pseudo-Random Function N/A N/A CSFPPRF CSFPPRF6 CSFRNG N/A
PKCS #11 Public Key Structure Encrypt N/A N/A CSFPPE2 CSFPPE26 CSFPKE N/A
PKCS #11 Public Key Structure Verify N/A N/A CSFPPV2 CSFPPV26 CSFDSV N/A
PKCS #11 Public Key Verify N/A N/A CSFPPKV CSFPPKV6 CSF1PKV1 N/A
PKCS #11 Secret Key Decrypt N/A N/A CSFPSKD CSFPSKD6 CSF1SKD1 N/A
PKCS #11 Secret Key Encrypt N/A N/A CSFPSKE CSFPSKE6 CSF1SKE1 N/A
PKCS #11 Set Attribute Value N/A N/A CSFPSAV CSFPSAV6 CSF1SAV1 N/A
PKCS #11 Token Record Create N/A N/A CSFPTRC CSFPTRC6 CSF1TRC1 N/A
PKCS #11 Token Record Delete N/A N/A CSFPTRD CSFPTRD6 CSF1TRD1 N/A
PKCS #11 Token Record List N/A N/A CSFPTRL CSFPTRL6 CSF1TRL1 N/A
PKCS #11 Unwrap Key N/A N/A CSFPUWK CSFPUWK6 CSF1UWK1 N/A
PKCS #11 Verify Keyed MAC N/A N/A CSFPHMV CSFPHMV6 CSF1HMV1 N/A
PKCS #11 Wrap Key N/A N/A CSFPWPK CSFPWPK6 CSF1WPK1 N/A
PKDS Key Record Create CSNDKRC CSNFKRC CSFPKRC CSFPKRC6 CSFPKRC CSFPKRC
PKDS Key Record Delete CSNDKRD CSNFKRD CSFPKRD CSFPKRD6 CSFPKRD CSFPKRD
PKDS Key Record Read CSNDKRR CSNFKRR CSFPKRR CSFPKRR6 CSFPKRR CSFPKRR
PKDS Key Record Read2 CSNDKRR2 CSNFKRR2 CSFPRR2 CSFPRR26 CSFPRR2 CSFPRR2
PKDS Key Record Write CSNDKRW CSNFKRW CSFPKRW CSFPKRW6 CSFPKRW CSFPKRW
Prohibit Export CSNBPEX CSNEPEX CSFPEX CSFPEX6 CSFPEX CSFPEX
Prohibit Export Extended CSNBPEXX CSNEPEXX CSFPEXX CSFPEXX6 CSFPEXX CSFPEXX
Public Infrastructure Certificate CSNDPIC CSNFPIC CSFPIC CSFPIC6 CSFPIC CSFPIC
Random Number Generate CSNBRNG CSNERNG CSFRNG CSFRNG6 CSFRNG CSFRNG
Random Number Generate CSNBRNGL CSNERNGL CSFRNGL CSFRNGL6 CSFRNGL CSFRNGL
Recover PIN from Offset CSNBPFO CSNEPFO CSFPFO CSFPFO6 CSFPFO CSFPFO
Remote Key Export CSNDRKX CSNFRKX CSFRKX CSFRKX6 CSFRKX CSFRKX
Restrict Key Attribute CSNBRKA CSNERKA CSFRKA CSFRKA6 CSFRKA CSFRKA
Retained Key Delete CSNDRKD CSNFRKD CSFRKD CSFRKD6 CSFRKD CSFRKD
Retained Key List CSNDRKL CSNFRKL CSFRKL CSFRKL6 CSFRKL CSFRKL
SAF ACEE Selection N/A N/A CSFACEE CSFACEE6 N/A (see notes) N/A (see notes)
Secure Key Import CSNBSKI CSNESKI CSFSKI CSFSKI6 CSFSKI CSFSKI
Secure Key Import2 CSNBSKI2 CSNESKI2 CSFSKI2 CSFSKI26 CSFSKI2 CSFSKI2
Secure Messaging for Keys CSNBSKY CSNESKY CSFSKY CSFSKY6 CSFSKY CSFSKY
Secure Messaging for PINs CSNBSPN CSNESPN CSFSPN CSFSPN6 CSFSPN CSFSPN
SET Block Compose CSNDSBC CSNFSBC CSFSBC CSFSBC6 CSFSBC CSFSBC
SET Block Decompose CSNDSBD CSNFSBD CSFSBD CSFSBD6 CSFSBD CSFSBD
Symmetric Algorithm Decipher CSNBSAD CSNESAD CSFSAD CSFSAD6 CSFSAD N/A
Symmetric Algorithm Decipher CSNBSAD1 CSNESAD1 CSFSAD1 CSFSAD16 CSFSAD1 N/A
Symmetric Algorithm Encipher CSNBSAE CSNESAE CSFSAE CSFSAE6 CSFSAE N/A
Symmetric Algorithm Encipher CSNBSAE1 CSNESAE1 CSFSAE1 CSFSAE16 CSFSAE1 N/A
Symmetric Key Decipher CSNBSYD CSNESYD CSFSYD CSFSYD6 N/A N/A
Symmetric Key Decipher CSNBSYD1 CSNESYD1 CSFSYD1 CSFSYD16 N/A N/A
Symmetric Key Encipher CSNBSYE CSNESYE CSFSYE CSFSYE6 N/A N/A
Symmetric Key Encipher CSNBSYE1 CSNESYE1 CSFSYE1 CSFSYE16 N/A N/A
Symmetric Key Export CSNDSYX CSNFSYX CSFSYX CSFSYX6 CSFSYX CSFSYX
Symmetric Key Export with Data CSNDSXD CSNFSXD CSFSXD CSFSXD6 CSFSXD CSFSXD
Symmetric Key Generate CSNDSYG CSNFSYG CSFSYG CSFSYG6 CSFSYG CSFSYG
Symmetric Key Import CSNDSYI CSNFSYI CSFSYI CSFSYI6 CSFSYI CSFSYI
Symmetric Key Import2 CSNDSYI2 CSNFSYI2 CSFSYI2 CSFSYI26 CSFSYI2 CSFSYI2
Symmetric MAC Generate CSNBSMG CSNESMG CSFSMG CSFSMG6 N/A CSFSMG
Symmetric MAC Generate CSNBSMG1 CSNESMG1 CSFSMG1 CSFSMG16 N/A CSFSMG1
Symmetric MAC Verify CSNBSMV CSNESMV CSFSMV CSFSMV6 N/A CSFSMV
Symmetric MAC Verify CSNBSMV1 CSNESMV1 CSFSMV1 CSFSMV16 N/A CSFSMV1
TR-31 Export CSNBT31X CSNET31X CSFT31X CSFT31X6 CSFT31X CSFT31X
TR-31 Import CSNBT31I CSNET31I CSFT31I CSFT31I6 CSFT31I CSFT31I
TR-31 Optional Data Build CSNBT31O CSNET31O CSFT31O CSFT31O6 N/A N/A
TR-31 Optional Data Read CSNBT31R CSNET31R CSFT31R CSFT31R6 N/A N/A
TR-31 Parse CSNBT31P CSNET31P CSFT31P CSFT31P6 N/A N/A
TR-34 Bind-Begin CSNDT34B CSNFT34B CSFT34B CSFT34B6 CSFT34B CSFT34B
TR-34 Bind-Complete CSNDT34C CSNFT34C CSFT34C CSFT34C6 CSFT34C CSFT34C
TR-34 Key Distribution CSNDT34D CSNFT34D CSFT34D CSFT34D6 CSFT34D CSFT34D
TR-34 Key Receive CSNDT34R CSNFT34R CSFT34R CSFT34R6 CSFT34R CSFT34R
Transaction Validation CSNBTRV CSNETRV CSFTRV CSFTRV6 CSFTRV CSFTRV
Trusted Block Create CSNDTBC CSNFTBC CSFTBC CSFTBC6 CSFTBC CSFTBC
Unique Key Derive CSNBUKD CSNEUKD CSFUKD CSFUKD6 CSFUKD CSFUKD
VISA CVV Service Generate CSNBCSG CSNECSG CSFCSG CSFCSG6 CSFCSG CSFCSG
VISA CVV Service Verify CSNBCSV CSNECSV CSFCSV CSFCSV6 CSFCSV CSFCSV
Notes:
  • Key Data Set Update (CSFKDU and CSFKDU6) and Key Data Set Record Retrieve (CSFRRT and CSFRRT6) will only be granted access with an explicitly defined covering profile.
  • SAF ACEE Selection (CSFACEE and CSFACEE6) does not have SAF checking or callable service exit support on its own. The service specified in the service_name parameter determines SAF checking and callable service exit capability.
  • N/A is shown in a column when the callable service:
    • Does not have CCA entry points (CCA entry point names columns).
    • Does not call SAF to determine access to a CSFSERV resource (SAF resource name column).
    • Does not allow a callable service exit to be defined (Callable service exit name column).
  • 1 CSF1xxx is just another name for the CSFPxxx service.