Record type 82 (X'52') — PCF Record

Record type 82 was used to record information about the events and operations of the Programmed Cryptographic Facility (PCF).

Record type 82 was written to the SMF data set at the completion of each of the following cryptography functions:
  • Initialization:

    The record is written when the Programmed Cryptographic Facility is initialized, either when cryptography is started or as a part of the key generator utility program.

  • Start:

    The record is written when a START command is issued for cryptography.

  • Stop:

    The record is written when a STOP command is issued for cryptography.

  • Generation of an operational key:

    If specified in the initialization options for cryptography, a record is written after processing each GENKEY macro instruction.

  • Transformation of an operational key:

    If specified in the initialization options for cryptography, a record is written after processing each RETKEY macro instruction.

  • Execution of the key generator utility:

    The record is written after the execution of the key generator utility program, thus providing a record of changes to the cryptographic key data set (CKDS).

Record type 82 consists of a header section and five possible relocate sections. The header section identifies the RACF® user ID and group name or the job and step name of the non-RACF cryptography user, the cryptography function when the record describes, and the return code issued by the function. The header section is 45 bytes long.

The five possible variable relocate sections are:
  • Key generator utility, which indicates changes made by the utility to the host system master key, the local keys, the cross keys, and the remote keys.
  • GENKEY function, which indicates the action taken in response to a GENKEY macro instruction.
  • RETKEY function, which indicates the action taken in response to a RETKEY macro instruction.
  • Cryptography initialization, which describes the SMF recording options in effect at initialization and the cryptography function and key manager user SVC numbers.
  • Installation data, which contains any information supplied by an installation exit routine.
Note: The number of relocate sections depends on the type of action taken. For instance, the record written when the Programmed Cryptographic Facility stops consists only of the header section. When the Programmed Cryptographic Facility has previously been initialized within the same IPL, the record written when cryptography starts consists of only the header section. The number of relocate sections is indicated in CRY82VCT (offset 37).