Using CA Top secret utility TSSXTEND it abends with U3044

Document ID : KB000113121
Last Modified Date : 05/09/2018
Show Technical Document Details
Why do we get an abend U3044 from the CA Top secret utility TSSXTEND? 
The old security files were defined with the AES feature. The new security files were defined without the AES feature.
It's not allowed to copy an AES secfile to a non-AES secfile, hence the abend U3044.

You have to defined the new security file with the AESENCRYPTION  or AES256ENCRYPT TSSXTEND option .

See the links below: 

DES to AES128 conversion:

To AES256 conversion: