Using ICSF, you can generate keys by using either the key generator utility program (KGUP) or the key generate callable service. Both KGUP and the key generate callable service create all types of keys except PKA keys and ANSI X9.17 keys. KGUP stores the key that it generates in the CKDS. The key generate callable service returns the key to the application program that called it, instead of storing it in the CKDS. The application program can then call the dynamic CKDS update service to store the key in the CKDS.