Restrictions
The restrictions for CSNDPKI.
This verb imports RSA keys of up to 4096 bits. However, the hardware configuration sets the limits on the modulus size of keys for digital signatures and key management; thus, the key can be successfully imported but fail when used if the limits are exceeded.
The importer_key_identifier parameter is a limited-authority key-encrypting key.
CRT form tokens with a private section ID of X'05' cannot be imported.
Note: As of CCA 5.4 and 6.2,
this verb supports three-key TDES keys. As a key management service this includes three-key TDES key encrypting keys
(KEKs).
TR-31 KEKs can only be used in the importer_key_identifier with this verb starting with CCA 8.1. However, TR-31 KEKs used in the importer_key_identifier do not support trusted blocks.