Create global key

1. Create an NAEParameterSpec object. Pass the keyname as an argument.

2. Obtain an instance of KeyGenerator. Pass the key algorithm and provider name (IngrianProvider) as arguments.

3. Call the generateKey method of the KeyGenerator object to create the key.

Code sample

The following sample generates a global key AES key named mykey.

NAEParameterSpec spec = new NAEParameterSpec("mykey");
KeyGenerator keygen = KeyGenerator.getInstance("AES", "IngrianProvider");
keygen.init(spec);
SecretKey aesKey = keygen.generateKey();

To mark a global key exportable and deletale, pass the boolean values to the NAEParameterSpec object. The following sample shows how to make mykey exportable and deletable:

NAEParameterSpec spec = new NAEParameterSpec("mykey", true, true);

To mark a global key exportable and non-deletable and specify key size for a key, pass the boolean values and key size to the NAEParameterSpec object. The following sample shows how to make mykey exportable and non-deletable and assign the key bit length to 256 bits.

NAEParameterSpec spec = new NAEParameterSpec("mykey", true, false, 256);

Note

Global keys cannot be created with KMIP.