Defining Keys in Parmlib › In-House Keys › Secure Key Processing

Secure Key Processing

Use the SecureKeysOnly attribute to route encryption and decryption processes to an optional PCI cryptographic coprocessor, such as the PCIXCC or Crypto Express2 card, on a z890, z990, or z9 platform. This attribute of the symmetric key section is only in effect if the SecureKeysOnly attribute is set to K in the StartupOptions section.

To selectively use Secure Keys

Specify the following option for SecureKeysOnly attribute in the key_section of the symmetric key:

SecureKeysOnly=Y

The secure key process is defined for this symmetric key.

Note: For more information about the SecureKeysOnly attribute and other CA Tape Encryption attributes, see the Configuration Guide.