z/OS Cryptographic Services ICSF Application Programmer's Guide
Previous topic | Next topic | Contents | Index | Contact z/OS | Library | PDF


Clear PIN Encrypt (CSNBCPE and CSNECPE)

z/OS Cryptographic Services ICSF Application Programmer's Guide
SA22-7522-16

The Clear PIN Encrypt callable service formats a PIN into one of these PIN block formats and encrypts the results. You can use this service to create an encrypted PIN block for transmission. With the RANDOM keyword, you can have the service generate random PIN numbers.

Note:
A clear PIN is a sensitive piece of information. Ensure that your application program and system design provide adequate protection for any clear PIN value.
  • IBM 3621 format
  • IBM 3624 format
  • ISO-0 format (same as the ANSI X9.8, VISA-1, and ECI formats)
  • ISO-1 format (same as the ECI-4 format)
  • ISO-2 format
  • ISO-3 format
  • IBM 4704 encrypting PINPAD (4704-EPP) format
  • VISA 2 format
  • VISA 3 format
  • VISA 4 format
  • ECI2 format
  • ECI3 format

An enhanced PIN security mode, on PCICC, PCIXCC, CEX2C, or CEX3C, is available for formatting an encrypted PIN block into IBM 3621 format or IBM 3624 format. To do this, you must enable the PTR Enhanced PIN Security access control point in the default role. When activated, this mode limits checking of the PIN to decimal digits. No other PIN block consistency checking will occur.

The callable service name for AMODE(64) invocation is CSNECPE.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014