The return code specifies the general result of the callable service. Appendix A. ICSF and TSS Return and Reason Codes lists the return codes.

The reason code specifies the result of the callable service that is returned to the application program. Each return code has different reason codes that indicate specific processing problems. Appendix A. ICSF and TSS Return and Reason Codes lists the reason codes.

The length of the data that is passed to the installation exit. The length can be from X'00000000' to X'7FFFFFFF' (2 gigabytes). The data is identified in the exit_data parameter.

The length of the key_identifier parameter. For the KEY-CLR keyword, the length is in bytes and includes only the value of the key length. The key length value can be 16, 24, or 32. For the KEYIDENT keyword, the length must be 64.

For the KEY-CLR keyword, this specifies the clear AES key. The parameter must be left justified. For the KEYIDENT keyword, this specifies an internal clear AES token or the label name of a clear AES key in the CKDS. Normal CKDS label name syntax is required.

The length of the text you supply in the text parameter. The maximum length of text is 2147483647 bytes. If the text_length is not a multiple of 8 bytes and if the ONLY or LAST keyword of the rule_array parameter is called, the text is padded in accordance with the processing rule specified.

The application-supplied text for which the MAC is generated.

The number of keywords specified in the rule_array parameter. The value can be 1, 2, 3 or 4.

This keyword provides control information to the callable service. The keywords must be eight bytes of contiguous storage with the keyword left-justified in its 8-byte location and padded on the right with blanks.

You can specify one of the MAC processing rules and then choose one of the segmenting control keywords and one of the MAC length keywords.

The length of the chaining_vector parameter. On output, the actual length of the chaining vector will be stored in the parameter.

This field is used as a system work area for the chaining vector. Your application program must not change the data in this string. The chaining vector holds the output chaining vector from the caller.

The mapping of the chaining_vector depends on the algorithm specified. For AES, the chaining_vector field must be at least 36 bytes in length.

Reserved for future use. Value must be zero.

Reserved for future use.

The length in bytes of the MAC to be returned in the mac field. The allowable values are 12 and 16 bytes.

The 12-byte or 16-byte field in which the callable service returns the MAC value if the segmenting rule is ONLY or LAST.

For CSNBSMG1 and CSNESMG1 only, the ALET of the text for which the MAC is generated.