What is it that you want to encrypt? TKLM is IBMs recommended (cost) replacement for EKM (free). I believe that it is nothing more than a key manager and serves up keys to whatever hardware that requests them. In our environment our Java EKM serves up keys and utilizes RACF as the backend keystore. Our tape library, VTS and tape drives are configured to request keys from the EKM and encrypt the data accordingly.
-----Original Message----- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Daniel McLaughlin Sent: Thursday, March 18, 2010 8:51 AM To: IBM-MAIN@bama.ua.edu Subject: Re: Encryption software? This topic is getting bounced around here and on the RACF-L as well, yet responses are scarce and sporadic. We in the hinterlands are looking for experiences with any of the major encrypting products to help in selecting one, without being hounded by vendors. Our site has mentioned TKLM and it looks like a nightmare, plus it doesn't cover all our media. We have FDR, so FDRCRYPT is a possibility. We have CA products, OpenTech products, and MegaCryption looks interesting. Bottom line...many of us are soliciting opinions from those who have run that gauntlet already. TIA...rave mode set to off. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
