From all the talk, I take it that there is no way to decrypt the tape on
the host if a decrypting drive is not available? That sounds like a
"hole" to me.
True. I believe that the encypted data is written in such a way that a non-encryption tape drive cannot even read it. So even if you knew the encryption data format and keys, you can't get the data to decrypt it.
Even with encrypted drives at a DR site, the proper keys must be entered or imported into the key store of the DR system.
--
Bruce A. Black
Senior Software Developer for FDR
Innovation Data Processing 973-890-7300
personal: [EMAIL PROTECTED]
sales info: [EMAIL PROTECTED]
tech support: [EMAIL PROTECTED]
web: www.innovationdp.fdr.com
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html