Ward, Mike S wrote:
Thanks for the answer.
I just finished generating an exporter key using ICSF. Do I need to
generate an importer key as well? The ICSF admin book sort of says they
complement each other, but it doesn't say whether you need both. I will
be encrypting tapes using VDR's utility, and I'll need to read the tapes
back in at the local site or at a remote site. Am I just ok with an
exporter key?
I don't know what are your needs.
However exporter/importer keys (I assume symmetric keys) are for key
transportation in secure way. Instead of that you can transport the keys
in clear form (it is unsecure and requires SSM).
Again, if you transport the keys "unidirectionally" (from system A to
system B, never in opposite direction), then one pair exporter/importer
is OK. If you want to have bidirectional "key traffic" then you need two
pairs.
Picture
one direction:
SYSA exporter1 ----> importer1 SYSB
second direction:
SYSA importer2 <---- exporter2 SYSB
importer1 and exporter1 are 'complementary' - they have the same value.
importer2 and exporter2 are complementary also.
--
Radoslaw Skorupka
Lodz, Poland
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
