Robert, It is going to depend on what you are using or looking at doing.
If you are already down this road, provide some details and we can help provide some guidance. Is this hardware encryption? (TS1120 E05 or E06 tape drives, using ICSF) Is this software encryption? (IBM TIVOLI, CA TAPE, FDR CRYPT) --> I am sure if I indicated the wrong software, some kind soul will correct me :-D) When you ask about tape datasets are they individual, one per tape, or are you asking about multiple files on one tape? Here is my config with tape encryption. We are using a TS1120 E05 tape drives in a TS3500 ATL. I use EKM from IBM for the tape encryption software. We have Top Secret managing the KEYS for the encryption. With this setup when on file on the tape is encrypted ALL files on the same tape are encrypted. If I add a new file to the end of an encrypted tape it is automatically encrypted because it happens to be on the encrypted tape. >From what I understand I cannot encrypt one file on a tape - it is all or nothing. The encryption will apply to all files on the tape regardless. Also, for my shop, our encryption is done at the hardware level. So over all easy to maintain and support. Was it easy to implement - NO. Did I get it done - Yes. The main problem is pieces that need to be put together to make it work. Our costs were the upgrade to E05 drives, we do not use ICSF nor did we get any other software except EKM which is free. Now that I have gone through this process, I can see why there can be a struggle to implement it. Lizette > Hi all, > > > > Anyone using mainframe tape encryption to selectively encrypt DSN's on tape > volumes or entire volumes? Successes? Issues? > > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
