{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-payment-cryptography/refs/heads/main/json-schema/openapi-import-tr34-key-block-schema.json",
  "title": "ImportTr34KeyBlock",
  "description": "Parameter information for key material import using TR-34 standard.",
  "type": "object",
  "properties": {
    "CertificateAuthorityPublicKeyIdentifier": {
      "allOf": [
        {
          "$ref": "#/components/schemas/KeyArnOrKeyAliasType"
        },
        {
          "description": "The <code>KeyARN</code> of the certificate chain that signs the signing key certificate during TR-34 key import."
        }
      ]
    },
    "ImportToken": {
      "allOf": [
        {
          "$ref": "#/components/schemas/ImportTokenId"
        },
        {
          "description": "The import token that initiates key import into Amazon Web Services Payment Cryptography. It expires after 7 days. You can use the same import token to import multiple keys to the same service account."
        }
      ]
    },
    "KeyBlockFormat": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Tr34KeyBlockFormat"
        },
        {
          "description": "The key block format to use during key import. The only value allowed is <code>X9_TR34_2012</code>."
        }
      ]
    },
    "RandomNonce": {
      "allOf": [
        {
          "$ref": "#/components/schemas/HexLength16"
        },
        {
          "description": "A random number value that is unique to the TR-34 key block generated using 2 pass. The operation will fail, if a random nonce value is not provided for a TR-34 key block generated using 2 pass."
        }
      ]
    },
    "SigningKeyCertificate": {
      "allOf": [
        {
          "$ref": "#/components/schemas/CertificateType"
        },
        {
          "description": "The public key component in PEM certificate format of the private key that signs the KDH TR-34 wrapped key block."
        }
      ]
    },
    "WrappedKeyBlock": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Tr34WrappedKeyBlock"
        },
        {
          "description": "The TR-34 wrapped key block to import."
        }
      ]
    }
  },
  "required": [
    "CertificateAuthorityPublicKeyIdentifier",
    "ImportToken",
    "KeyBlockFormat",
    "SigningKeyCertificate",
    "WrappedKeyBlock"
  ]
}