Steps for generating key parts using ICSF utilities

  1. Access ICSF utilities by choosing option 5, UTILITY, on the ICSF Primary Menu panel

    The CSFUTL00 — ICSF Utilities panel appears. You use the RANDOM and CHECKSUM options to generate random numbers, checksums, and verification patterns for master key management.

  2. Choose option 3, RANDOM, to access the CSFRNG00 — ICSF Random Number Generator panel.
  3. To select the parity of the random numbers, enter ODD, EVEN, or RANDOM next to Parity Option and press ENTER.

    The DES-MK master key is forced to have odd parity, regardless of the parity option you select for each key part. Parity is not checked for AES, ECC, or PKA master keys.

    A random 16-digit number appears in each of the Random Number fields. You can use each of these random numbers for a segment of a key part.

    The DES master key uses random numbers 1 and 2. The PKA master key uses random numbers 1 through 3. The AES and ECC master keys use random numbers 1 through 4.

    Figure 1. ICSF Random Number Generator Panel with Generated Numbers
     CSFRNG00 ---------------- ICSF - Random Number Generator -------------
     COMMAND ===>
    
    
     Enter data below:
    
       Parity Option  ===> RANDOM            ODD, EVEN, RANDOM
       Random Number1    : 51ED9CFA90716CFB  Random Number 1
       Random Number2    : 58403BFA02BD13E8  Random Number 2
       Random Number3    : 9B28AEFA8C47760F  Random Number 3
       Random Number4    : 8453313235ABF69C  Random Number 4 
     
  4. When you end the utility panels and access the Master Key Part Entry panel, the key parts you generated are transferred automatically to the Master Key Part Entry panels. For this reason, you will not need to enter the key parts on the Master Key Part Entry panels.

    Although the key parts are automatically transferred to the Master Key Entry panels, make sure you record the random numbers and store them in a safe place. You must have these numbers in case you ever need to reenter the master key values. If you ever need to restore a master key that has been cleared for any reason, you will need the key part values.

  5. Press END to return to the Utilities panel.
  6. Continue with Steps for generating a checksum, verification pattern, or hash pattern for a key part.