Restriction: AKEKs are only supported on the IBM zSeries 800 and the IBM zSeries 900.

AKEKs are bidirectional and are OP-form-only keys that can be used in both import and export. Prior to using the key generate callable service to create an AKEK, you need to use the key token build callable service to create a key token for receiving the AKEK. The steps involved in this process are:

1. Use the key token build callable service with these parameter values:

   Parameter

   Value

   Key_type

   AKEK

   Rule_array

   INTERNAL NO-KEY {SINGLE or DOUBLE-O}

2. Use the key generate callable service with these parameter values:

   Parameter

   Value

   Key_form

   OP

   Key_type_1

   TOKEN

   Generated_key_identifier_1

   The skeleton key token created in step 1