Easy to see why it would be wanted. The problem is that encryption at that level would most likely require massive application changes.
Even so, AFAIK, data encryption / decryption is the easy part. The hard part is managing all those keys. The keys themselves cannot flow in the open. They, too, have to be encrypted. As do those keys, etc etc etc. If the keys to a file are well known, then what's the point? So, we get down to basics: if all access to the file is properly controlled, they why bother with encryption? Encryption comes into play when physical control is not possible: on a tape, PC, or network. But then the key management issue rears its ugly head. HTH and good luck. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Surfer SIC Sent: Wednesday, August 31, 2005 10:15 AM To: [email protected] Subject: Encryption Does anyone know of a method/product that would encrypt VSAM data on disk. We are testing the FDR produuct for off-site tapes and based on my experience with Innovation I don't expect any issues. I've been asked about encrypting CICS VSAM data. My response was that the application can make ICSF calls. I don't know of a product we can put in that would handle this. I'm trying to get a handle on the "why would you want this?" with RACF and proper degauzing for drives EMC/HDS/IBM replaces in place. I did search the archives and also got input from the WSC. Any insight from this list would be appreciated. Thanks! Rob ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
