Restrictions

Edit online

The restrictions for CSNBKEX.

For security reasons, requests will fail by default if they use an equal key halves exporter to export a key with unequal key halves. You must have access control point Key Export - Unrestricted explicitly enabled if you want to export keys in this manner.

Note: As of CCA 5.4 and CCA 6.2, this verb supports three-key TDES keys. As a key management service this includes three-key TDES key encrypting keys (KEKs).

TR-31 tokens can only be used with this verb starting with CCA 8.1.