Required commands

Edit online

The required commands for CSNDSYI.

This verb requires the following commands to be enabled in the active role based on the key-formatting method and the algorithm:

Required commands for the Symmetric Key Import verb
Key-formatting method Algorithm Offset Command
PKA92 and DATA, MAC, MACVER, KEYGENKY, EXPORTER, or OKEYXLAT key DES X'0235' Symmetric Key Import - DES, PKA92 KEK
PKCSOAEP or PKCS-1.2

AES
DES


X'012E'
X'0106'


Symmetric Key Import - AES, PKCSOAEP, PKCS-1.2
Symmetric Key Import - DES, PKCS-1.2
ZERO-PAD

AES
DES


X'012F'
X'023D'


Symmetric Key Import - AES, ZERO-PAD
Symmetric Key Import - DES, ZERO-PAD
WRAP-ECB or WRAP-ENH, when the default key-wrapping method setting does not match the keyword DES X'0144' Symmetric Key Import - Allow wrapping override keywords

The following access control points control the use of weak transport keys:

  • To disallow the import of a key wrapped with a weaker transport key, the Symmetric Key Import2 - disallow weak import command (offset X'032B') must be enabled in the active role.
  • To disable the wrapping of a key with a weaker transport key, the Prohibit weak wrapping - Transport keys command (offset X'0328') must be enabled in the active role.
  • To receive an informational message when wrapping a key with a weaker key-encrypting key, enable the Warn when weak wrap - Transport keys command (offset X'032C') in the active role. The Prohibit weak wrapping - Transport keys command overrides this command.

The following access control points control the use of weak master keys:

  • To disable the wrapping of a key with a weaker master key, the Prohibit weak wrapping - Master keys command (offset X'0333') must be enabled in the active role.
  • To receive a warning when wrapping a key with a weaker master key, enable the Warn when weak wrap - Master keys command (offset X'0332') in the active role. The Prohibit weak wrapping - Master keys command overrides this command.