Keywords › KEYSIZE Keyword—Specify Key Size

KEYSIZE Keyword—Specify Key Size

Valid on z/OS.

Use the KEYSIZE keyword to specify the size of the private encryption key in decimal bits.

This keyword has the following format:

TSS REKEY(acid) KEYSIZE(keysize)

Keysize

Valid values are:

• 512 Low‑strength key.
• 768 Medium‑strength key.
• 1024 (Default) High‑strength key.
• 2048 Specifies a very high strength key (only valid with PCICC or DSA keywords)

This keyword is used with:

• The REKEY command
• The ACID types User, DCA, VCA, ZCA, LSCA, and SCA
• ACID(MAINTAIN) and MISC4(CERTGEN) authority for users
• MISC4(CERTSITE) authority for CERTSITE ACIDs
• MISC4(CERTAUTH) authority for CERTAUTH ACIDs

Example: KEYSIZE keyword

This example creates low strength key:

TSS REKEY(user1) DIGICERT(cert0001)
                 NEWDIGIC(cert0002)
                 KEYSIZE(512)