Importing CVK and PVK

Jan 13, 2015 at 8:08 AM

I have CVK and PVK encrypted under ZMK, I need to import these keys under LMK so, I'm using IV command from the HSM console but whenever I enter the ZMK I receive key parity error.

I have MDK, IWK and AWK and all of them imported successfully except CVK and PVK

May I seek your advise....
Jan 19, 2015 at 2:33 AM

The best way to import PVK and CVK is using IK console command. Do not use IV, it is obsolete and requires legacy ZMK.

1) make sure you have correctly formed ZMK using FK command. The 3rd part have give it to you in a clear componnet (or multiple componnet); ZMK has 000 key type. Together with ZMK you should receive ZMK check value. It MUST be the same with check value that was returned by your HSM after formation of key.
2) Depending on representation of CVK and PVK, these keys can be double length or pair of single length DES keys, import whole double length key or combine the pair (CVK A and CVK B for example) in double length key before import. PVK has 002 key type and CVK has 402 key type.

Good luck!