Using IMPORTER key-encrypting keys

Read this information for a summary all of the importer key-encrypting keys that are needed to import all of the cross-domain keys. This information also describes how to create the importer key-encrypting keys.

To import all types of cross-domain keys you will need the following IMPORTER key-encrypting keys:

  1. A KEK for importing the left half of exporter keys

    Create this key using the clear host master key, the left half of an exporter key-encrypting key control vector, and 16 bytes of hex 88.

  2. A KEK for importing the right half of exporter keys

    Create this key using the clear host master key, the right half of an exporter key-encrypting key control vector, and 16 bytes of hex 88.

  3. A KEK for importing the left half of importer keys.

    Create this key using the clear host master key, the left half of an importer key-encrypting key control vector, and 16 bytes of hex 22.

  4. A KEK for importing the right half of importer ke ys.

    Create this key using the clear host master key, the right half of an importer key-encrypting key control vector, and 16 bytes of hex 22.

  5. A KEK for importing the left half of OPINENC keys.

    Create this key using the clear host master key, the left half of an OPINENC key control vector, and 16 bytes of hex 88.

  6. A KEK for importing the right half of OPINENC keys.

    Create this key using the clear host master key, the right half of an OPINENC key control vector, and 16 bytes of hex 88.

  7. A KEK for importing the left half of IPINENC keys .

    Create this key using the clear host master key, the left half of an IPINENC key control vector, and 16 bytes of hex 44.

  8. A KEK for importing the right half of IPINENC keys.

    Create this key using the clear host master key, the right half of an IPINENC key control vector, and 16 bytes of hex 44.

  9. A KEK for importing the left half of PINGEN keys.

    Create this key using the clear host master key, the left half of a PINGEN key control vector, and 16 bytes of hex 44.

  10. A KEK for importing the right half of PINGEN keys.

    Create this key using the clear host master key, the left half of a PINGEN key control vector, and 16 bytes of hex 44.

  11. A KEK for importing the left half of PINVER keys .

    Create this key using the clear host master key, the left half of a PINVER key control vector, and 16 bytes of hex 44.

  12. A KEK for importing the right half of PINVER ke ys.

    Create this key using the clear host master key, the left half of a PINVER key control vector, and 16 bytes of hex 44.

Parent topic: Migrate to the Cryptographic Coprocessor