Work with Field Encryption Keys (WRKFLDKEY)

The Work with Field Enc. Keys (WRKFLDKEY) command allows authorized users to display the keys used for encrypting/decrypting a field entry in the Registry.

This command will show the history of the keys used, as well as the current keys being used to encrypt and decrypt data.

This command requires the user to have *USE authority to the CRVL002 Validation List (*VLDL) object which contains the Field Encryption Registry.

7/18/06           Work with Field Encryption Keys             1:57:19                                                           CRRM047    D2 Field identifier  . . . . . . CREDITCARD Key Id  Encryption Key Label         Key Store        1   CREDITCARDKEY200601          KEYLIB/KEYSTORE          2   CREDITCARDKEY200603          KEYLIB/KEYSTORE       3   CREDITCARDKEY200606          KEYLIB/KEYSTORE      4   CREDITCARDKEY200609          KEYLIB/KEYSTORE     5   CREDITCARDKEY200701          KEYLIB/KEYSTORE      6   CREDITCARDKEY200704          KEYLIB/KEYSTORE       7   CREDITCARDKEY200707          KEYLIB/KEYSTORE    *CURRENT KEY                                                         F3=Exit   F5=Refresh   F11=View2   F12=Cancel

Screen Example:  WRKFLDKEY Command with Sample Values

The key shown with the value of “*CURRENT KEY” is the current Key id used to encrypt and decrypt field values.

This screen will show *PENDING Keys if entered.

8   CREDITCARDKEY201804    KEYLIB/KEYSTORE    *CURRENT KEY     9   CREDITCARDKEY201805    KEYLIB/KEYSTORE    *PENDING KEY

How to get there

From the Field Keys Menu, choose option 1, Work with Field Encryption Keys.

Or, prompt (F4) the command of CRYPTO/WRKFLDKEY.

Options

Field identifier (FLDID)

Indicate the unique name of the entry to display the keys used.