Is it possible to generate a DES key with NO-XPORT (CV bit 17 = B'0') using KGUP ADD statement?

I couldn't find a way to generate a non exportable DES Key in  z/OS System Administrators Guide (https://www.ibm.com/docs/en/zos/2.5.0?topic=statements-syntax-add-update-control).

In order to accomplish this I had to call CSNBRKA after generating the key by KGUP.

Thanks




 



------------------------------
Fernando Pellisario
------------------------------

You're right - the XPORT-OK and NO-XPORT keywords that control Bit 17 in a DES key CV are not supported in KGUP. If that is something you require, please open an RFE. Thanks.

------------------------------
Bob Petti
------------------------------

Original Message:
Sent: Fri December 24, 2021 07:49 AM
From: Fernando Pellisario
Subject: KGUP NO-XPORT

Is it possible to generate a DES key with NO-XPORT (CV bit 17 = B'0') using KGUP ADD statement?

I couldn't find a way to generate a non exportable DES Key in  z/OS System Administrators Guide (https://www.ibm.com/docs/en/zos/2.5.0?topic=statements-syntax-add-update-control).

In order to accomplish this I had to call CSNBRKA after generating the key by KGUP.

Thanks




 



------------------------------
Fernando Pellisario
------------------------------