z/OS Cryptographic Services ICSF Administrator's Guide
Previous topic | Next topic | Contents | Index | Contact z/OS | Library | PDF


Migrating from PCF Key Types

z/OS Cryptographic Services ICSF Administrator's Guide
SA22-7521-17

Your installation may use Programmed Cryptographic Facility (PCF). ICSF provides key types that are similar to the PCF key types and provides other key types for enhanced key separation and more functions. You cannot use a PCF key on ICSF, but you can convert a PCF key into an ICSF key. Table 1 lists which ICSF key types correspond to the PCF key types.

Table 1. PCF and Corresponding ICSF Key Types
PCF
Key Type
ICSF Key Type
Local key
Exporter key-encrypting key
or
Output PIN-encrypting key
Remote key
Importer key-encrypting key
or
Input PIN-encrypting key
Cross key
Importer key-encrypting key and
exporter key-encrypting key
or
Input PIN-encrypting key and
output PIN-encrypting key

ICSF provides compatibility modes and a conversion program to help you run PCF with ICSF and to migrate from PCF to ICSF. The conversion program converts PCF keys to ICSF keys. For information about migration from PCF to z/OS ICSF, see z/OS Cryptographic Services ICSF System Programmer’s Guide.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014