Entering master key parts

You can use the Master Key Entry panels to enter clear master key parts. The way you obtain master key parts depends on the security guidelines in your enterprise. You may receive master key parts from a key distribution center or you may generate your own key parts using the ICSF random number utility.

Note:

You can control who is allowed to enter a particular key part using SAF controls. See Key part control for Master Key Entry utility. End of change

Important: Regardless of the source of the master key parts or the method of key entry, make sure the key parts are recorded and saved in a secure location. When you are entering the key parts for the first time, be aware that you may need to reenter these same key values at a later date to restore master key values that have been cleared.

These procedures apply to all master keys supported on your system. The DES master key is used as an example. All of the master keys are optional. You should load the master keys required for your applications.

To enter master key parts that you do not generate using the random number utility, continue with Steps for entering the first master key part.

To begin master key entry by generating random numbers for the key parts, continue with Generating master key data for master key entry.