
74 IBM Eserver zSeries 990 (z990) Cryptography Implementation
– The KEYMAN1 profile is mapped to the KEYMAN1 role, with the pass
phrase KEYMAN1.
– The KEYMAN2 profile is mapped to the KEYMAN2 role, with the pass
phrase KEYMAN2.
– The TKEUSER profile is mapped to the TKEUSER role, with the pass
phrase TKEUSER.
4. It loads and sets a TKE IBM 4758 random DES Master Key.
5. It initializes TKE DES key storage and TKE PKA key storage.
Figure 4-10 TKE workstation predefined roles and profiles
4.2.2 TKE access control administration
This step is used to change the TKE user profiles default pass phrases and
replace the IBM 4758 Master Key which was randomly ...