AAL2MigrateBlobICSF

Function prototype (aal2sdk.h)

aat_int32 AAL2MigrateBlobICSF (
                           TDigipassBlob*   DPBlob,
                           TKernelParms*    CallParms,
                           aat_ascii*       aOldStorageKeyName,
                           aat_ascii*       aOldInitialVector,
                           aat_ascii*       aNewStorageKeyName,
                           aat_ascii*       aNewInitialVector);

Description

The BLOB migration function can be used to:

1. Convert a BLOB encrypted with a software storage key to a BLOB encrypted with an HSM storage key.

   (i.e. software --> HSM-encrypted) BLOB ready to be stored in the database.

2. Migrate an HSM storage key encrypted BLOB to a NEW HSM storage key encrypted BLOB.

   (i.e. HSM Storage Key 1 --> HSM Storage Key 2).

You can acquire a software-encrypted BLOB using the Authentication Suite Server SDK API AAL2DPXGetTokenBlobsEx2(). This will extract a BLOB but not migrate it.

Parameters

The memory management of the output parameters must be performed by the calling function.

COBOL calling convention

Entry point: AA2MGBIC
02   W-BLOB               PIC X(248).
02   W-KERNELPARMS.
     03   W-PARMCOUNT     PIC 9(8) USAGE BINARY.
     03   W-PARM01        PIC 9(8) USAGE BINARY.
     . . .
     03   W-PARM19        PIC 9(8) USAGE BINARY.
02   W-RETURN             PIC S9(8) USAGE BINARY.
02   W-OLDSTORAGEKEY      PIC X(65).
02   W-OLDINITVECTOR      PIC X(17).
02   W-NEWSTORAGEKEY      PIC X(65).
02   W-NEWINITVECTOR      PIC X(17).
02   W-API-NAME           PIC X(8) VALUE 'AA2MGBIC'.
. . .
     CALL W-API-NAME USING
           BY REFERENCE W-BLOB
           BY REFERENCE W-KERNELPARMS
           BY REFERENCE W-OLDSTORAGEKEY
           BY REFERENCE W-OLDINITVECTOR
           BY REFERENCE W-NEWSTORAGEKEY
           BY REFERENCE W-NEWINITVECTOR
           RETURNING W-RETURN

Return codes