Using ICSF, you can generate DES and AES keys by using either the key generator utility program (KGUP) or the key generate callable service. KGUP stores the key that it generates in the CKDS. The key generate callable service returns the key to the application program that called it instead of storing it in the CKDS. The application program can then call the CKDS key record write service to store the key in the CKDS.