Keywords › SYMXPORT Keyword—Symmetric Key Export Options

SYMXPORT Keyword—Symmetric Key Export Options

Valid on z/OS.

Use the SYMXPORT keyword to specify which public keys can be used to export a symmetric key that is controlled by the permit. If not specified, any public key is eligible.

This keyword has the following format:

TSS PER(acid) CSFKEYS(resource) SYMXPORT(BYANY|BYNONE|BYLIST) 

BYANY

Any symmetric token may be used subject to existing SAF checks.

BYNONE

The symmetric token may not be exported.

BYLIST

Any symmetric token in either the certificate list or the PKDS label list may be used to export the key.

This keyword is used with:

• The PERMIT command
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• CSFKEYS and XCSFKEY resource classes only
• Resource(XAUTH) authority to specify ACTION for resources that are owned within their scope

Example: SYMXPORT keyword

This example allows you use use the NJDEPT1 ACID with any symmetric token subject to existing SAF checks:

TSS PER(NJDEPT1) CSFKEYS(resource) SYMXPORT(BYANY)