Certain KEYUSAGE values for a key type require the complementary key be generated or a key value be supplied. If, for example, an AES CIPHER key is generated with KEYUSAGE(ENCRYPT), the key can only be used for encrypting data. There is no key to decrypt the data. A key value can be supplied and a complementary key can be generated with the same key value. A complementary key can be generated and wrapped with a transport key. Complementary KEYUSAGE values are shown in the z/OS ICSF Administrator's Guide in the description for KEYUSAGE.
Processing ends for this control statement. Normal processing of the input file continues.
Check the syntax of the control statement. Decide whether to provide a key value or transport key or modify the KEYUSAGE values. Rerun the key generator utility program.