Defining Security Protection Profiles in CA Top Secret › Key Protection Profiles for CA Top Secret › ADDTO Command to Define a Specific Key for CA Top Secret

ADDTO Command to Define a Specific Key for CA Top Secret

Use the RDEFINE command to define a specific key to CA Top Secret. This command indicates the type of key you want to define. Use this command with an associated PERMIT command for each key and each subsystem.

This command has the following format:

TSS ADDTO(department) CA@BES(BESn.key_type.key_name)

TSS

Indicates a CA Top Secret command.

ADDTO

Specifies the ADDTO command. The short form of this command is ADD.

department

Specifies the department name that owns the BES resources.

CA@BES

Specifies the general resource class for CA Tape Encryption. For keys, this is always CA@BES.

n

Indicates the BES task number. If you specify BES with no subsystem identifier, the profile applies to all BES subsystems.

key_type

Indicates the type of key to define. Options for this parameter are as follows:

KEYCODE

Specifies a code book. If you specify this option, the value for the key_name must be defined in the <B2BCodeBooks> section of parmlib.

KEYCERT

Specifies a digital certificate key pair. If you specify this option, the value for the key_name must be a digital certificate defined to the security system on a key ring specified in the <B2BKeyrings> section of parmlib.

KEYSYMM

Specifies a symmetric key. If you specify this option, the value for the key_name must be defined in the <SymmetricKeys> section of parmlib.

key_name

Specifies the name of the key. Replace any spaces in the key name with periods.

Example: Define a symmetric key

This example defines a symmetric key named AES256_KEY to BES1 for CA Top Secret. It indicates that you want to control this key on this subsystem.

TSS ADDTO(DEPT01) CA@BES(BES1.KEYSYMM.AES256_KEY)