Key management
Key Lifecycle Management

Global Key Types

1min
you can define a global key type that is accessible across all {{ch}} services each service can modify the global key type configuration or add a new key type that is only accessible under that service the following example demonstrates how to create global key types for the 3des ktk, mak, pek, and cvk keys log in to the {{ch}} web dashboard under dual control access with your administrator users select the gear icon in the upper right corner of the page and go to administration > settings > key types add the following 3des symmetric keys 3des ktk key algorithm t/des key size triple key usage key transport tr 31 header d0000k0tn00e0000 akb header 1kdne000 excrypt modifier 0 3des mak key algorithm t/des key size triple key usage signing tr 31 header d0000m1tn00e0000 akb header 1kdne000 excrypt modifier 3 3des pek key algorithm t/des key size double key usage pin encryption tr 31 header d0000p0tn00e0000 akb header 1pune000 excrypt modifier 1 3des cvk key algorithm t/des key size double key usage pin verification tr 31 header d0000v0tn00e0000 akb header 1cdne000 excrypt modifier 4