Symmetric keys

Using ICSF, you can generate DES and AES keys by using either the key generator utility program (KGUP) or the key generate callable service. KGUP stores the key that it generates in the CKDS. The key generate callable service returns the key to the application program that called it instead of storing it in the CKDS. The application program can then call the CKDS key record write service to store the key in the CKDS.

When you use callable services to generate keys, you pass parameters that specify information about the key you want generated. The services generates keys in these possible forms:

Operational, if the master key protects it.
Importable, if an importer key-encrypting key protects it.
Exportable, if an exporter key-encrypting key protects it.