AAL2MigrateBlobICSFEx

Function prototype (aal2sdk.h)

aat_int32 AAL2MigrateBlobICSFEx (
                           TDigipassBlob*   DPBlob,
                           TKernelParms*    CallParms,
                           aat_ascii*       aTransportKeyName,
                           aat_ascii*       aTransportKeyKCV,
                           aat_ascii*       aStorageKeyName,
                           aat_ascii*       aInitialVector);

Description

The extended BLOB migration function allows you to migrate an HSM transport key encrypted BLOB into an HSM storage key encrypted BLOB (i.e. HSM transport key → HSM storage key) ready to be stored in the database.

It is used in conjunction with AAL2DPXInitHSM.

You can retrieve an HSM transport key-encrypted BLOB using the Authentication Suite Server SDK API AAL2DPXGetTokenBlobsEx2(). This function will extract a BLOB but not migrate it.

You only can retrieve this HSM transport key-encrypted BLOB if the relevant DPX file has been created using HSM transport key encryption, also called DPX double encryption.

Parameters

The memory management of the output parameters must be performed by the calling function.

COBOL calling convention

Entry point: AA2MGBIX
02   W-BLOB               PIC X(248).
02   W-KERNELPARMS.
     03   W-PARMCOUNT     PIC 9(8) USAGE BINARY.
     03   W-PARM01        PIC 9(8) USAGE BINARY.
     . . .
     03   W-PARM19        PIC 9(8) USAGE BINARY.
02   W-RETURN             PIC S9(8) USAGE BINARY.
02   W-TRANSPORTKEY       PIC X(65).
02   W-TRANSPORTKEYKCV    PIC X(7).
02   W-STORAGEKEY         PIC X(65).
02   W-INITVECTOR         PIC X(17).
02   W-API-NAME           PIC X(8) VALUE 'AA2MGBIx'.
. . .
     CALL W-API-NAME USING
           BY REFERENCE W-BLOB
           BY REFERENCE W-KERNELPARMS
           BY REFERENCE W-TRANSPORTKEY
           BY REFERENCE W-TRANSPORTKEYKCV
           BY REFERENCE W-STORAGEKEY
           BY REFERENCE W-INITVECTOR
           RETURNING W-RETURN

Return codes