Work with Key Officers (WRKKEYOFR)
Key Officers are those users that are authorized to create and manage Master Encryption Keys (MEKs), Key Stores, Data Encryption Keys (DEKs) and the Field Encryption Registry.
The WRKKEYOFR command allows an organization to work with the key officers within the Symmetric Key environment.
The Key Officers and their authority settings are stored in the CRYPTO library by default. These settings are encrypted with the Product Encryption Key (PEK).
|
6/24/06 Work with Key Officers 22:04:19 CRRM040 D2
Type options, press Enter. 2=Change 4=Remove 5=Display
Key Key Load Set/Clear Key Field IFS Opt User Policy Officers MEKs MEKs Stores DEKs Reg. Reg. __ MARY *NO *YES *YES *YES *YES *YES *YES *NO __ JACK *NO *NO *YES *NO *NO *YES *YES *YES __ BILL *NO *NO *YES *NO *NO *YES *NO *YES __ ELLIE *YES *YES *YES *NO *NO *YES *YES *NO
F3=Exit F5=Refresh F6=Add F11=View2 F12=Cancel |
Screen Example: WRKKEYOFR Command with Sample Values
The following users can utilize this command:
- QSECOFR user profile
- A user profile with *SECADM authority
- A Key Officer that has a *YES specified for the “Maintain key officers” authority setting
How to Get There
From the Key Policy and Security Menu, choose option 10, Work with Key Officers. Or, execute the command of CRYPTO/WRKKEYOFR.
Options
For each Key Officer listed on the screen, you can utilize one of the following options.
| Option | Description |
|---|---|
| 2 | Displays a prompt to change the authority settings for the Key Officer using the CHGKEYOFR command |
| 4 | Displays a prompt to confirm the removal of the Key Officer using the RMVKEYOFR command |
| 5 | Displays the current authority settings for the Key Officer using the DSPKEYOFR command |
Screen Function Keys
Listed below are the function keys you can utilize within the WRKKEYOFR screen.
| Fnctn | Description |
|---|---|
| F3 | Exits the WRKKEYOFR screen |
| F5 | Refreshes the list of Key Officers |
| F6 | Displays a prompt to add a new Key Officer using the ADDKEYOFR command |