The RSA or DSA key size is not acceptable. The maximum key size is determined by United States export restrictions or internal system limits based on the key type. The minimum DSA key is 512 bits. The minimum size of a clear RSA key, a secure RSA key in the PKDS (public key data set), or a DSA key is 512 bits. The minimum size of a secure RSA key in the TKDS (token key data set) is 1024 bits and it must also be a multiple of 256 bits.

Generation of a certificate with a clear RSA key with a key size greater than 1024 requires that the CP Assist for Cryptographic Functions (CPACF) (feature code 3863) is enabled and the TDES function is available.