On Friday, 09/01/2006 at 03:05 EST, "McKown, John" 
<[EMAIL PROTECTED]> wrote:
> From all the talk, I take it that there is no way to decrypt the tape on
> the host if a decrypting drive is not available? That sounds like a
> "hole" to me.

You are correct that you need a new drive to read tapes created on the new 
drive.  This isn't a particularly new concept, either.  We've been through 
that with the 3480/3490/3590.

And having a decrypting drive is necessary, but not sufficient.  The drive 
must be able to access a key manager who can get the keys.  The same ones 
used to encrypt the tape in the first place.

Alan Altmark
z/VM Development
IBM Endicott

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to