Special secure mode

To use special secure mode, you must either:

Define the CSF.SSM.ENABLE SAF profile in the XFACILIT SAF resource class.
Specify YES for the SSM installation option in the installation options data.
For information about specifying installation options, see z/OS Cryptographic Services ICSF System Programmer's Guide.

If these conditions permit the use of special secure mode, it is enabled automatically when you specify that you are entering clear key values in a KGUP statement.

For a detailed description of how to use KGUP to enter keys, see Managing Cryptographic Keys Using the Key Generator Utility Program.