Use the CKDS key record write callable service to write an internal AES or DES key token to the CKDS record specified by the key_label parameter. This service supports writing a record to the CKDS which contains a key token with a control vector which is not supported by the Cryptographic Coprocessor Feature. These records will be written to the CKDS with a key type of CV, unless the key is a DES IMPORTER, EXPORTER, PINGEN, PINVER, IPINENC, or OPINENC type. These key types will be preserved in the CKDS record, even if the control vector is not supported by the Cryptographic Coprocessor Feature.

This service updates both the DASD copy of the CKDS currently in use by ICSF and the in-storage copy. The record you are updating must be unique and must already exist in both the DASD and in-storage copies of the CKDS.

This service supports writing a clear AES or DES key token with non-zero key values to the CKDS.

The callable service name for AMODE(64) invocation is CSNEKRW.