The record defined by the key_label parameter must be unique and must already exist in the CKDS.

On CCF systems, writing a NOCV key-encrypting key is restricted to callers in supervisor mode or in system key.

This callable service does not support version X'10' external DES key tokens (RKX key tokens).