To perform key entry from the TKE workstation, you must use a logical partition that already has key entry enabled.

In certain situations, ICSF clears the master key registers so the master key value is not disclosed. ICSF clears the master keys in all the logical partitions. The CKDSs and PKDSs are still enciphered under the master keys. To recover the keys in the CKDSs and PKDSs, you must reenter and activate the DES, SYM-MK, ASYM-MK and PKA master keys.

To restore the master keys, first ensure that key entry is enabled for all usage domain indexes for which you need to reenter the master keys. Since multiple domains can have key entry enabled, the domains may already be enabled. Reenter and activate the master key for all usage domain indexes. You can do this either through the Clear Master Key Part Entry panels or the TKE workstation.