These usage notes only apply to CCF systems.

This service produces an internal DATA token with a control vector which is usable on the Cryptographic Coprocessor Feature. If a valid internal token is supplied as input to the service in the key_identifier field, that token's control vector will not be used in the encryption of the clear key value.

This service marks this internal key token CDMF or DES, according to the system's default encryption algorithm, unless token copying overrides this. The service marks this internal key token CDMF or DES, according to the system's default encryption algorithm, unless token copying overrides this. See System Encryption Algorithm for details.

The Clear Key Import/Multiple Clear Key Import - DES access control point controls the function of this service.

This table lists the required cryptographic hardware for each server type and describes restrictions for this callable service.

Table 10. Clear key import required hardware

Server	Required cryptographic hardware	Restrictions
IBM zSeries 900	Cryptographic Coprocessor Feature
IBM zSeries 890 IBM zSeries 990	PCI X Cryptographic Coprocessor/Crypto Express2 Coprocessor	There are no internal token markings for CDMF or DES. There is no token copying.
IBM System z9 EC IBM System z9 BC	Crypto Express2 Coprocessor	There are no internal token markings for CDMF or DES. There is no token copying.