Performing Recovery Operations › TBEMIGRT Utility › How You Modify Your Configuration for Key Management for CPU Upgrades › Move Keys for CPU Upgrades That Support CKDS

Move Keys for CPU Upgrades That Support CKDS

You can move keys from the BES database to CKDS when you upgrade your system to a CPU that has a cryptographic coprocessor and support for CKDS.

To move keys for CPU upgrades that support CKDS

1. Run TBEMIGRT with the following PARM= syntax:

   PARM='BES=BESn,TOCKDS,MOVE'
   

   n

   Indicates the subsystem of your BES database.

   This moves the keys to the CKDS and then removes them from the BES database.

2. Specify the following attribute in the startup options in parmlib:

   KeysDatabase=CKDS
   

   This ensures that your symmetric keys are stored in the CKDS database.

Note: You are not required to store the keys in the CKDS, but you have the option to do so.