When you run the pass phrase initialization utility for the first time, you must perform these steps:

1. Install the ICSF program product according to the instructions in z/OS Planning for Installation and z/OS Program Directory.
2. Create an empty CKDS.
3. Create an empty PKDS.
4. Create an installation options data set.
5. Create an ICSF startup procedure.
6. Ensure ICSF is running in COMPAT(NO) mode
7. Start ICSF.
8. Access the ICSF panels.

These steps are described in z/OS Cryptographic Services ICSF System Programmer’s Guide