This topic describes the callable services that generate and maintain cryptographic keys.

Using ICSF, you can generate keys using either the key generator utility program or the key generate callable service. ICSF provides a number of callable services to assist you in managing and distributing keys and maintaining the cryptographic key data set (CKDS).

This topic describes these callable services:

• Clear Key Import (CSNBCKI and CSNECKI)
• Control Vector Generate (CSNBCVG and CSNECVG)
• Control Vector Translate (CSNBCVT and CSNECVT)
• Cryptographic Variable Encipher (CSNBCVE and CSNECVE)
• Data Key Export (CSNBDKX and CSNEDKX)
• Data Key Import (CSNBDKM and CSNEDKM)
• Diversified Key Generate (CSNBDKG and CSNEDKG)
• ECC Diffie-Hellman (CSNDEDH and CSNFEDH)
• Key Export (CSNBKEX and CSNEKEX)
• Key Generate (CSNBKGN and CSNEKGN)
• Key Generate2 (CSNBKGN2 and CSNEKGN2)
• Key Import (CSNBKIM and CSNEKIM)
• Key Part Import (CSNBKPI and CSNEKPI)
• Key Part Import2 (CSNBKPI2 and CSNEKPI2)
• Key Test (CSNBKYT and CSNEKYT)
• Key Test2 (CSNBKYT2 and CSNEKYT2)
• Key Test Extended (CSNBKYTX and CSNEKTX)
• Key Token Build (CSNBKTB and CSNEKTB)
• Key Token Build2 (CSNBKTB2 and CSNEKTB2)
• Key Translate (CSNBKTR and CSNEKTR)
• Key Translate2 (CSNBKTR2 and CSNEKTR2)
• Multiple Clear Key Import (CSNBCKM and CSNECKM)
• Multiple Secure Key Import (CSNBSKM and CSNESKM)
• PKA Decrypt (CSNDPKD and CSNFPKD)
• PKA Encrypt (CSNDPKE and CSNFPKE)
• Prohibit Export (CSNBPEX and CSNEPEX)
• Prohibit Export Extended (CSNBPEXX and CSNEPEXX)
• Random Number Generate (CSNBRNG, CSNERNG, CSNBRNGL and CSNERNGL)
• Remote Key Export (CSNDRKX and CSNFRKX)
• Restrict Key Attribute (CSNBRKA and CSNERKA)
• Secure Key Import (CSNBSKI and CSNESKI)
• Secure Key Import2 (CSNBSKI2 and CSNESKI2)
• Symmetric Key Export (CSNDSYX and CSNFSYX)
• Symmetric Key Generate (CSNDSYG and CSNFSYG)
• Symmetric Key Import (CSNDSYI and CSNFSYI)
• Symmetric Key Import2 (CSNDSYI2 and CSNFSYI2)
• Transform CDMF Key (CSNBTCK and CSNETCK)
• Trusted Block Create (CSNDTBC and CSNFTBC)
• TR-31 Export (CSNBT31X and CSNET31X)
• TR-31 Import (CSNBT31I and CSNET31I)
• TR-31 Optional Data Build (CSNBT31O and CSNET31O)
• TR-31 Optional Data Read (CSNBT31R and CSNET31R)
• TR-31 Parse (CSNBT31P and CSNET31P)
• User Derived Key (CSFUDK and CSFUDK6)