Using ICSF, you can generate keys using either the key generator utility program or the key generate callable service. The dynamic CKDS update callable services allow applications to directly manipulate the CKDS. ICSF provides callable services that support DES and AES key management as defined by the IBM Common Cryptographic Architecture (CCA).
The next few topics describe the key generating and management options ICSF provides.