The ICSF CKDS has several sets of system keys. These are the keys with labelname of X'00' and are installed during CKDS initialization.
The system keys are required in the fixed-length format CKDS with record authentication enabled. These keys are created when the CKDS is initialized. If record authentication is not enabled, no system keys are created when the CKDS is initialized.
There are no system keys required for the variable-length format CKDS. Other existing system keys in a CKDS initialized on an older server are not used and their presence in the CKDS has no effect on operations.