IBM Crypto Education Community

IBM Crypto Education Community

IBM Crypto Education Community

Join the IBM Crypto Education community to explore and understand IBM cryptography technology. This community is operated and maintained by the IBM Crypto Development team.

 View Only
Expand all | Collapse all

CKDS Meta Data

Discussion Topic

Discussion TopicThu July 18, 2019 03:51 PM

Discussion Topic

Discussion TopicFri July 19, 2019 10:15 AM

  • 1.  CKDS Meta Data

    Posted Wed July 17, 2019 01:30 PM

    Hi,

     

    How often does the meta data for a CKDS record get updated?

    I'm using KDMR to retrieve Last used date, and it doesn't seem to update instantly, i.e. I create a new record using KRC2, use the key in another function (e.g. CSFPTR), and the last used date still shows zeroes (for a brief time).

    Also the Service meta doesn't populate either (attached in screenshot).

    I have been deleting/re-creating this record using the same key label and key token repeatedly over the past half hour though, maybe this is why the meta data isn't what I expect?

     

    Basically we have some functionality in our interface that wants to check if the key has been used before, so my idea was to check Last Used date since the meta data read I think doesn't trigger an update. Now I'm not so sure.

    hermanpun


  • 2.  Re: CKDS Meta Data

    Posted Thu July 18, 2019 03:22 PM

    Hello. I think I can answer your questions.

     

    ICSF will harden updates if more than '77'X have accumulated or every 1 hour by default. During this time, the reference date and service are queued for update but are not hardened to the KDS and may not be visible to KDMR.

     

    If you have HCR77B1 or later, you can check the current settings with D ICSF,OPT

     

    Refdate update interval in Days/HH.MM.SS = 001/00.00.00
    Refdate update period   in Days/HH.MM.SS = 000/01.00.00

     

    The default setup is "update at most once per day (a day is 00:00:00 to 23:59:59 UTC)" and "harden to DASD and update in-store once per hour unless more than '77'X [119 decimal] updates have accumulated"

     

    Also, any pending updates are hardened to the KDS if ICSF is stopped.

    erossman


  • 3.  Re: CKDS Meta Data

    Posted Thu July 18, 2019 03:51 PM

    Thank you!

    hermanpun


  • 4.  Re: CKDS Meta Data

    Posted Fri July 19, 2019 10:15 AM

    Happy to help!

    erossman