In the course of business, you may find it necessary to reuse or reassign a domain that is currently active. If this is the case, there are several steps to perform. It is a good security practice to zeroize the domain secrets, which includes retained keys and master keys.
Run the retained key delete service in the domain to remove them.
You can zeroize the master key with the TKE workstation or with TSO panels. For information on the TKE process, see z/OS Cryptographic Services ICSF TKE Workstation User's Guide.