If the VTAM® encryption facility is installed, the cryptographic capability of the logical unit can be changed for future sessions by using the MODIFY SECURITY or MODIFY ENCR command. The ENCRTYPE keyword can only be changed using the MODIFY SECURITY command. For the syntax of the command, see z/OS Communications Server: SNA Operation.

In addition, an alternate LU key-encrypting key can be used while the master key is being changed in the CKDS. See Changing cryptographic keys dynamically for additional information.