Z/OS: Trusted Key Entry Workstation (tke)

Use on TKE 5.2 or
before
Use on TKE 5.3
Use on TKE 6.0
Use on TKE 7.0
and above
Created on TKE
5.2 or before
Yes
Yes
Yes
No
Created on TKE
5.3
No
Yes
Yes
Yes
2
10 z/OS: Trusted Key Entry Workstation (TKE)

---

Table 6. TKE smart card usage (continued)
Use on TKE 5.2 or
before
Use on TKE 5.3
Use on TKE 6.0
Use on TKE 7.0
and above
Created on TKE
6.0, 1024-bit zone
key
No
Yes
1
Yes
Yes
2
Created on TKE
6.0, 2048-bit zone
key
No
No
Yes
Yes
Created on TKE
7.0 and above
No
No
No
Yes
1
This smart card could contain:
• Key parts.
• A 1024-bit or 2048-bit authority signature key.
• A 1024-bit or 2048-bit cryptographic adapter logon key.
In TKE 5.3, 2048-bit keys are not supported. Only the key parts and 1024-bit keys could be used in TKE
5.3.
2
You must use smart cards associated with part number 45D3398 or 74Y0551 in this release of TKE.
Datakey smart cards are not supported in TKE 7.0 or later.
When creating an EP11 smart card on TKE 8.1, you must use a smart card associated with part numbers
74Y0551 or 00JA710.
Datakey card usage
Support for Datakey smart cards was withdrawn in TKE 7.0. You can make a backup of an existing Datakey
CA smart card onto a more current smart card part number or copy key parts from an existing Datakey
TKE smart card onto a more current smart card part number, but you cannot otherwise use Datakey smart
cards on TKE 7.0 or later.
Use the Smart Card Utility program to backup an existing Datakey CA smart card. This allows the zone of
the Datakey CA smart card to continue to be used on TKE 7.0 or later. Use the Backup CA smart card
option in the CA Smart Card pull-down menu to backup a CA smart card.
Copy key parts from an existing Datakey TKE smart card using the Cryptographic Node Management
Utility. The target TKE smart card must be in the same zone as the source TKE smart card. This allows key