The HSM provides Host commands to generate and translate a ZPK.
The generate facility encrypts the ZPK under the ZMK for transmission to another party and under the LMK for storage on the Host database.
The two translate commands allow a ZPK to be translated from encryption under a ZMK to encryption under the LMK and vice versa.