GCM and CCM are combined modes, so there is one key you feed in and it's handled correctly internally. I agree with Richard that this is the right approach if available on our systems.