Under the API Cryptographic Services folder are all the ICSF services that can be enabled or disabled from the TKE workstation. See z/OS Cryptographic Services ICSF Application Programmer's Guide for the correlation between the access control point and the ICSF callable service.