TSSXTEND and TSSRECVR › How to Change the Security File Size or Encryption Key

How to Change the Security File Size or Encryption Key

The TSSXTEND utility lets an MSCA or an authorized user enlarge or reduce the size of the security file or change the security encryption key. TSSXTEND is used in combination with the TSSMAINT utility.

Important! Change your encryption key only if you suspect a violation of the integrity of the key. To change the key, run TSSKEY by using the APPLY CRYPTKY control statement, and supply the new key.

A user needs one of the following authorizations to run TSSXTEND:

• USE access to the TSSUTILITY.TSSXTEND entity in the CASECAUT resource class for any function except ZAP.

  An administrator can grant this level of access by issuing the following command:

  TSS PERMIT(user) CASECAUT(TSSUTILITY.TSSXTEND) ACCESS(USE) 
  

• UPDATE access to TSSUTILITY.TSSXTEND entity in the CASECAUT resource class for using the ZAP function.

  An administrator can grant this level of access by issuing the following command:

  TSS PERMIT(user) CASECAUT(TSSUTILITY.TSSXTEND) ACCESS(UPDATE)
  

To change the security file size or encryption key:

1. Determine the level of security file usage by issuing the TSS MODIFY(STATUS) command and review security file (NNN%) in message TSS9661I.

   NNN%

   Represents the percentage of the security file used.

2. Use the TSSMAINT utility to create a new security file.
3. Issue a TSS MODIFY(BACKUP) command to copy the current security file to the current backup security file.
4. Run the TSSXTEND utility to copy the backup security file to a new security file.

More information:

Creating the Security File

Installing the Key