Generate and Print a TMK, TPK or PVK

Command:

Generate a random key, return it encrypted under LMK pair 14-15 and print it at the HSM attached printer.

Notes:

The HSM must be in the Authorised state.

A printer must be attached to the HSM Printer port or Auxiliary port.

The HSM must have a print format already defined.

The ESCON option does not return the second response message and its first response message is delayed until after printing has been completed (this is because the channel protocol allows only one response per request.

The delimeter to separate optional fields is changed from “;” to “|”.

Field

Length & Type

Details

COMMAND MESSAGE

Message header

m A

(Subsequently returned to the Host unchanged).

Command code

2 A

Value OE.

Print Field 0

n A

The print field defined as Print Field 0 in the print format definition (must not contain a “;” character).

Delimiter

1 A

Value ;

Print Field 1

n A

The print field defined as Print Field 1 in the print format definition (must not contain a “;” character).

.

.

.

.

.

.

.

.

.

Last print field

n A

The last print field defined in the print format definition (must not contain a “;” character).

Delimiter

1 A

Optional. If present the following three fields must be present.  Value “|”.

If an option is not required by the command fill with a valid value or 0.

Reserved

1 A

Optional. If present must be 0.

Key scheme LMK

1 A

Optional. Key scheme for encrypting key under LMK.

Reserved

1 A

Optional. If present must be 0.

End message delimiter

1 C

Optional. Must be present if a message trailer is present. Value X’19.

Message trailer

n A

Optional. Maximum length 32 characters.

Field

Length & Type

Details

 RESPONSE MESSAGE (before printing)

Message header

m A

(Subsequently returned to the Host unchanged).

Response code

2 A

Value OF.

Error code

2 N

00 : No errors

13 : LMK error; report to supervisor

15 : Error in input data

16 : Printer not ready/not connected

17 : Not in the Authorized state

18 : Format definition not loaded

TMK, TPK or PVK

16H or
1A+32H or 1A+48H

TMK, TPK or PVK encrypted under LMK pair 14-15.

End message delimiter

1 C

Present only if present in the command message. Value X’19.

Message trailer

n A

Present only if present in the command message. Maximum length 32 characters.

 RESPONSE MESSAGE  (after printing)

Message header

n A

Returned to the Host unchanged.

Response code

2 A

Value OZ.

Error code

2 N

00 : No errors

13 : LMK error; report to supervisor

16 : Printer not ready/disconnected

End message delimiter

1 C

Present only if present in the command message. Value X’19.

Message trailer

n A

Present only if present in the command message.  Maximum length 32 characters.