Restrictions

The restrictions for CSNBKPI.

If a label is specified on key_identifier, the label must be unique. If more than one record is found, the verb fails.

You must have access control point Key Part Import - Unrestricted explicitly enabled. Otherwise, current applications will fail with either of the following conditions:

  • The first eight bytes of key identifier is different than the second eight bytes AND the first eight bytes of the combined key are the same as the last second eight bytes
  • The first eight bytes of key identifier is the same as the second eight bytes AND the first eight bytes of the combined key are different than the second eight bytes.
Note: As of CCA 5.4 and CCA 6.2, this verb supports three-key TDES keys. As a key management service this includes three-key TDES key encrypting keys (KEKs).