Import an Encrypted Key Value for DES keys

When you supply KGUP with an encrypted key value, the value is encrypted under a transport key. The transport key is one key in a complementary key pair that you share with another system. When the other system's KGUP generated a key, the program also stored a control statement to use to create the complementary key. The other system sends the control statement to your system. You can use the statement to supply an encrypted key value to KGUP to create the key.

These statements show the syntax when you supply an encrypted key value to KGUP.

When you supply a single-length, encrypted key value:

   ADD or UPDATE  LABEL(label)  TYPE(data,exporter,importer,
   mac,macver, or any PIN key) TRANSKEY(key-label 1)  KEY(key-value)

When you supply a double-length, encrypted key value:

   ADD or UPDATE  LABEL(label)  TYPE(data,datam,datamv,exporter,importer,
   or any PIN key) TRANSKEY(key-label 1)  KEY(key-value,ikey-value)

When you supply a triple-length, encrypted key value:

   ADD or UPDATE  LABEL(label)  TYPE(data),
   TRANSKEY(key-label 1)  KEY(key-value, key-value, key-value)

When you supply a single-length, encrypted key value, and you are using the key to exchange keys with a cryptographic product that does not use control vectors or double-length keys:

   ADD or UPDATE  LABEL(label)  TYPE(exporter or importer),
   TRANSKEY(key-label 1)  KEY(key-value)  NOCV

Note: Single-length keys with replicated key parts can be brought in under a TRANSKEY only if the TRANSKEY is an NOCV IMPORTER.

When you supply a double-length encrypted key value and you will use the key to exchange keys with a cryptographic product that does not use control vectors:

   ADD or UPDATE  LABEL(label)  TYPE(exporter or importer),
   TRANSKEY(key-label 1)  KEY(key-value,ikey-value)  NOCV