Restrictions
The restrictions for CSNBDKM.
For security reasons, requests will fail by default if they use an equal key halves importer to import a key with unequal key halves. You must have access control point 'Data Key Import - Unrestricted' explicitly enabled if you want to import keys in this manner.
Note: As of CCA 5.4 and CCA 6.2, this verb supports three-key TDES
keys. As a key management service this includes three-key TDES key encrypting keys (KEKs).