ICSF provides functions to create, import, and export AES, DES, and HMAC keys. This topic gives an overview of these cryptographic keys. Detailed information about how ICSF organizes and protects keys is in z/OS Cryptographic Services ICSF Administrator’s Guide.

ICSF supports two types of symmetric key tokens: fixed-length and variable-length. In fixed-length key tokens, key type and usage are defined by the control vector. In variable-length key tokens, the key type and usage are defined in the associated data section. The control vector and associated data section are cryptographically bound to the encrypted key value in the token.