Using CA Tape Encryption in Your z/OS Environment › Secure Key Processing › The SecureKeysOnly Attribute and Securing Keys Selectively › Secure Keys Selectively

Secure Keys Selectively

Use the SecureKeysOnly attribute in the StartupOptions and in each symmetric key section to selectively use secure keys.

To selectively use Secure Keys

1. Specify the following attribute in the StartupOptions attributes section of the parmlib:

   SecureKeysOnly=K
   

   Encryption and decryption activity is routed through ICSF to an IBM PCI cryptographic coprocessor based on individual symmetric key definitions.

2. Specify the following as an attribute of the symmetric key attribute section in parmlib for each symmetric key for which processing is be routed to a PCI card:

   SecureKeysOnly=Y
   

   The secure key process is defined for this symmetric key.