Translate a TMK, TPK or PVK from LMK to Another TMK, TPK or PVK

Command:

Translate a TMK, TPK or PVK from encryption under LMK pair 14-15 to encryption under another TMK (TPK or PVK).

Notes:

The command is used to replace an existing key with another key from the database.

Field

Length & Type

Details

COMMAND MESSAGE

Message header

m A

(Subsequently returned to the Host unchanged).

Command code

2 A

Value AE.

Current TMK, TPK or PVK

16H or
1A+32H or 1A+48H

The current TMK, TPK or PVK encrypted under LMK pair 14-15.

Stored TMK, TPK or PVK

16H or
1A+32H or 1A+48H

The stored TMK, TPK or PVK under LMK pair 14-15.

Delimiter

1 A

Optional. If present the following three fields must be present.  Value “;”.

If an option is not required by the command fill with a valid value or 0.

Key scheme TMK

1 A

Optional. Key scheme for encrypting key under TMK.

Reserved

1 A

Optional. If present must be 0.

Reserved

1 A

Optional. If present must be 0.

End message delimiter

1 C

Optional. Must be present if a message trailer is present. Value X’19.

Message trailer

n A

Optional. Maximum length 32 characters.

 RESPONSE MESSAGE

Message header

m A

Returned to the Host unchanged.

Response code

2 A

Value AF.

Error code

2 N

00 : No errors

10 : Current TMK, TPK or PVK parity error

11 : Stored TMK, TPK or PVK parity error

12 : No keys loaded in user storage

13 : LMK error; report to supervisor

15 : Error in input data

21 : Invalid user storage index

Stored key under the current key

16H or
1A+32H or 1A+48H

The stored key encrypted under the current key.

End message delimiter

1 C

Present only if present in the command message. Value X’19.

Message trailer

n A

Present only if present in the command message. Maximum length 32 characters.