A1: Yes, exporting an EXPORTER is the same as exporting any other key type. The use case you list is exactly what I was picturing.
A2: Yes. You can either use CSNBCVT or NOCV KEKs. I have yet to see a good reason to do what you are asking but it is possible. Eric Rossman --------------------------------- ICSF Security Architect z/OS Security --------------------------------- -----Original Message----- From: IBM Mainframe Discussion List <[email protected]> On Behalf Of Radoslaw Skorupka Sent: Sunday, July 6, 2025 4:30 PM To: [email protected] Subject: [EXTERNAL] ICSF export EXPORTER? Is it possible to export key TYPE(EXPORTER)? I mean export and EXPORTER key using another EXPORTER key or private key. It makes sense - to keep common EXPORTER/IMPORTER value for several systems. Q2: is it possible to change type of existing key? Let's say change DES 128 TYPE(DATA) to IMPORTER or vice versa. (I guess no) -- Radoslaw Skorupka Lodz, Poland ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
