Required commands

Edit online

The required commands for CSNBRKA.

The Restrict Key Attribute verb requires the following commands to be enabled in the active role:

Required commands for the Restrict Key Attribute verb
Rule-array keyword Offset Command
AES or HMAC X'00E9' Restrict Key Attribute - Export Control
DES X'0154' Restrict Key Attribute - Permit setting the TR-31 export bit

The following access-control points are also available:

  • To disable the wrapping of a key with a weaker master key, the Prohibit weak wrapping - Master keys command (offset X'0333') must be enabled in the active role.
  • To receive a warning when wrapping a key with a weaker master key, enable the Warn when weak wrap - Master keys command (offset X'0332') in the active role. The Prohibit weak wrapping - Master keys command overrides this command.