Services installation exits

ICSF provides services that you can use to perform various cryptographic functions. Examples of these functions include enciphering and deciphering data, generating and verifying message authentication codes, generating and verifying PINs, and dynamically updating the CKDS and PKDS. You can define an installation exit for each of the services to customize processing.

Starting with FMID HCR77B0, ICSF provides a single service exit called CSF_SERVICE_EXIT that gets control for all services. The intent of this exit is for statistics generation. For more information, see CSF_SERVICE_EXIT - ICSF callable services exit.

For a detailed description of the services, see z/OS Cryptographic Services ICSF Application Programmer's Guide.

Use this general format to request a service:

   CALL CSNBxxx (
                return_code
               ,reason_code
               ,exit_data_length
               ,exit_data
               ,parameter_5
               ,parameter_6
                 .
                 .
                 .
               ,parameter_N)

Table 1 lists the ICSF exit names for each of the services. The parameters that the application passes to a service are known as the service parameter list, and the parameters vary from service to service. Parameters describes the services parameter lists in more detail.