Key management on systems without coprocessors

The CKDS can be used to manage clear AES and DES DATA keys on a system that does not have any cryptographic coprocessors or accelerators.

A CKDS initialized on a system without coprocessors cannot be used with a system with coprocessors. ICSF will terminate during initialization and issue the CSFM128E message if you attempt to start ICSF with a CKDS that was initialized on a system without coprocessors. The CKDS cannot be updated to support systems with coprocessors.

Starting with release HCR7780, there are two formats of the CKDS: a fixed-length record (supported by all releases of ICSF) and a new, variable-length record (supported by HCR7780 and later releases). Both formats are supported for systems without coprocessors.