ICSF: Key material validity
Description: Key validity has two basic areas:
- Support for cryptoperiods for cryptographic objects. Cryptoperiods are enabled in ICSF through enforcement of start and end dates for KDS records. KDS record start and end dates are supported for KDSR format records only.
- Support for checking that the keys in the KDS are correctly formatted and that encrypted keys are enciphered under the current master key. If a key or keys in the CKDS or PKDS are not enciphered under the current master key, or have other formatting errors, this may cause a change MK operation to fail.
When change was introduced: Enhanced Cryptographic Support for z/OS V1R13 and z/OS V2R1 web deliverable.
Reference information:
- z/OS Cryptographic Services ICSF Overviewz/OS Cryptographic Services ICSF Overview
- z/OS Cryptographic Services ICSF Administrator's Guide
- z/OS Cryptographic Services ICSF Application Programmer's Guide
- z/OS Cryptographic Services ICSF System Programmer's Guide
- z/OS Cryptographic Services ICSF Messages