Change a Field Encryption Pending Key (CHGPNDKEY)

When using Field Procedures, the Change a Field Encryption Pending Key (CHGPNDKEY) command allows authorized users to change a Pending key in a Field entry that can be used in the next key rotation process.

This command can be used for *ACTIVE field entries that use Field Procedures.

The following users can use this command:

  • QSECOFR user profile (unless excluded in the Key Officer settings)
  • A user profile with *SECADM authority (unless excluded in the Key Officer settings)
  • A Key Officer who has a *YES specified for the "Maintain Field Enc. Registry" authority setting

This command requires that you have *CHANGE authority to the CRVL002 Validation List (*VLDL) object which contains the Field Encryption Registry.

The fields here are the same as those in the Add a Field Encryption Pending Key (ADDPNDKEY) panel.

How to Get There

On the File Field Encryption Menu, choose option 7.