Generate a Complementary, Encrypted Key Value
KGUP encrypts the complementary key value under the exporter key that you specify.
These statements show the syntax when you have KGUP generate the complementary key value in encrypted form.
When you generate a single-length, transport or PIN encrypted key
value:
ADD or UPDATE LABEL(label) or RANGE(start-label,end-label),
TYPE(exporter,importer,ipinenc,opinenc, or pingen),
TRANSKEY(key-label 1) SINGLEWhen you generate a single-length, DATA encrypted key value:
ADD or UPDATE LABEL(label) or RANGE(start-label,end-label),
TYPE(data) OUTTYPE(data) TRANSKEY(key-label 1)When you generate a single-length, MAC encrypted key value:
ADD or UPDATE LABEL(label) or RANGE(start-label,end-label),
TYPE(mac) OUTTYPE(mac or macver) TRANSKEY(key-label 1)When you generate a double-length, encrypted key value:
ADD or UPDATE LABEL(label) or RANGE(start-label,end-label),
TYPE(exporter,importer,ipinenc,opinenc, or pingen) TRANSKEY(key-label 1)When you generate a double-length DATA encrypted key value:
ADD or UPDATE LABEL(label) or RANGE(start-label,end-label),
TYPE(data or datam) LENGTH(16) TRANSKEY(key-label 1)When you generate a double-length DATAM encrypted key value:
ADD or UPDATE LABEL(label) or RANGE(start-label,end-label),
TYPE(datam) TRANSKEY(key-label 1)When you generate a triple-length DATA encrypted key value:
ADD or UPDATE LABEL(label) or RANGE(start-label,end-label),
TYPE(data) LENGTH(24) TRANSKEY(key-label 1)When you generate a single-length, encrypted key value, and you
are using the key to exchange keys with a cryptographic product that
does not use control vectors:
ADD or UPDATE LABEL(label) or RANGE(start-label,end-label),
TYPE(exporter or importer) TRANSKEY(key-label 1) SINGLE NOCVWhen you generate a double-length, encrypted key value, and you
are using the key to exchange keys with a cryptographic product that
does not use control vectors.
ADD or UPDATE LABEL(label) or RANGE(start-label,end-label),
TYPE(exporter or importer) TRANSKEY(key-label 1) NOCV