> -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On > Behalf Of Alan Altmark > Sent: Tuesday, September 05, 2006 3:37 PM > To: [email protected] > Subject: Re: Encrypting tape drives... anyone considering field > encryption? > /snip/ > Something to think about: CPACF does not do "secure key" operations. You > will still want to use ICSF in order to keep the clear-text keys out of > your application address space and to avoid Yet Another Key Managment > Problem. > > Alan Altmark
So, why did IBM update ICSF to support clear keys in the CKDS and its address space? Because IBM is marketing its own CPACF solution that requires clear keys. As long as the clear keys are kept in protected storage, it's not a big issue with most sites. Jeffrey D. Smith Principal Product Architect Farsight Systems Corporation 700 KEN PRATT BLVD. #204-159 LONGMONT, CO 80501-6452 303-774-9381 direct 303-484-6170 FAX http://www.farsight-systems.com/ comments are invited on my encryption project ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
