DES master key

Since ICSF only allows a 16-byte DES master key to be loaded, ICSF cannot be compliant for key strength for 24-byte operational keys wrapped by the DES master key. Starting with ICSF release HCR77A0, a 24-byte master key can be loaded. Only cryptographic coprocessors with the October, 2012 licensed internal code support this key length. The DES master key – 24-byte key access control point must be enabled in the ICSF role. See Managing Enterprise PKCS #11 Master Keys for more details.