Skip to content

/AWS1/CL_PCY=>GETPARAMETERSFOREXPORT()

About GetParametersForExport

Gets the export token and the signing key certificate to initiate a TR-34 key export from Amazon Web Services Payment Cryptography.

The signing key certificate signs the wrapped key under export within the TR-34 key payload. The export token and signing key certificate must be in place and operational before calling ExportKey. The export token expires in 7 days. You can use the same export token to export multiple keys from your service account.

Cross-account use: This operation can't be used across different Amazon Web Services accounts.

Related operations:

Method Signature

IMPORTING

Required arguments:

IV_KEYMATERIALTYPE TYPE /AWS1/PCYKEYMATERIALTYPE /AWS1/PCYKEYMATERIALTYPE

The key block format type (for example, TR-34 or TR-31) to use during key material export. Export token is only required for a TR-34 key export, TR34_KEY_BLOCK. Export token is not required for TR-31 key export.

IV_SIGNINGKEYALGORITHM TYPE /AWS1/PCYKEYALGORITHM /AWS1/PCYKEYALGORITHM

The signing key algorithm to generate a signing key certificate. This certificate signs the wrapped key under export within the TR-34 key block. RSA_2048 is the only signing key algorithm allowed.

RETURNING

OO_OUTPUT TYPE REF TO /AWS1/CL_PCYGETPARAMSFOREXPOUT /AWS1/CL_PCYGETPARAMSFOREXPOUT