Translate Key Scheme

Command:

Translate an existing key to a new key scheme.  This command supports the translation from 32H, X and Y formats.

Notes:

The HSM must be in Authorised state.

See Key Scheme Table for schemes available to encrypt keys

Field

Length & Type

Details

COMMAND MESSAGE

Message header

m A

(Subsequently returned to the Host unchanged).

Command code

2 A

Value B0.

Key type

3 H

See Key Type Table

Key    

32H or 1A+32H or 1A+48H

The key encrypted under appropriate LMK

Key scheme (LMK)

1 A

Key scheme for encrypting key under LMK. See section “Key Scheme Table”.

End message delimiter

1 C

Optional. Must be present if a message trailer is present. Value X’19.

Message trailer

n A

Optional. Maximum length 32 characters.

 RESPONSE MESSAGE

Message header

n A

Returned to the Host unchanged.

Response code

2 A

Value B1.

Error code

2 N

00 : No errors

10 : Key Parity error

12 : No keys loaded in user storage

13 : LMK error : report to supervisor

15 : Error in input data

17 : Not in authorised state

21 : Invalid user storage index

Key    

1A+32H or 1A+48H

The key encrypted under LMK.

End message delimiter

1 C

Present only if present in the command message. Value X’19.

Message trailer

n A

Present only if present in the command message. Maximum length 32 characters.