Using Console Commands › Console Commands › REGENERATE Command—Regenerate Key

REGENERATE Command—Regenerate Key

Use the REGENERATE command to do the following:

• Control the exact time that new keys are placed into service. When Regenerate=Manual is specified in the symmetric key definition in parmlib, keys are generated in advance. The keys do not change until the REGENERATE command is entered for a specific symmetric key name or codebook.
• Advance keys that are not set for manual regeneration, as well as the application keys internally managed by the Option for Application Management.

This command has the following format:

BESn REGENERATE=keyname|codebook[,ALL]

keyname|codebook

Specifies the symmetric key or codebook key to be replaced.

Note: Application keys managed by the Option for Application Management for external applications have the fixed key names APIDESKEY and APIAESKEY.

ALL

(Optional) Specifies that all of the pre-generated keys are to be discarded. This deactivates the current key and generates new keys for the current and pre-generated keys.

Example: REGENERATE Command

This example replaces the current version of the symmetric key defined in parmlib as AES128_KEY with a new version of the key:

BES1 REGENERATE=APIAESKEY