Previous Topic: ResourcesNext Topic: PKCS 7 and PKCS 12 Certificate Processing


PKCS #11 Functions Audit

PKCS #11 functions are audited with:

SMF type 82 subtype 1

Written during ICSF initialization. Contains the data set name of the token data set (TKDS).

SMF type 82 subtype 21

Written when a member joins or leaves a sysplex group contains the cryptographic keys data set (CKDS) data set name if the member joined or left the ICSF CKDS sysplex group, or the TKDS data set name if the member joined or left the ICSF TKDS sysplex group.

ICSF writes SMF type 82 subtype 23

Written whenever a TKDS record for a token or token object is created, modified, or deleted. ICSF does not write SMF records for changes to session objects.