Patrick O'Keefe wrote:
Our main crypto system programmer has a couple questions.
I'm just the scribe. If the following questions don't make much
sense, blame it on my lack of knowledge of the subject.
We did our initial ICSF work bassed on passphrases. We are
now going to switch to using real master keys. We have never
told our SAF product to encrypt keys so we aren't aware of anything
in the CKDS. However, we don't know if there is any other way to
request ICSF to use the CKDS so we don't know if the dataset is
really unused. (We could obviously use IDCAMS to display its
contents, but unused does not necessarily imply empty.)
Is there a way to tell if the CKDS is logically empty?
Yes. The simplest method is to print CKDS. Every record is a key.
However some keys are "for ICSF use" and you don't need them. However
other keys should be migrated. If you fail to do it, you can loose that
keys and in fact all the data encrypted with lost keys.
Is your CKDS empty ? No, unless it is never initialized.
Do you have any *non-ICSF* keys inside ? That's the question.
Print CKDS.
AFAIK in z/990 and newer machines you will have 2 "ICSF" keys.
On older machines it was definitely more.
Hint: every key has a LABEL. 64-byte name. Assigned by user. This should
be a clue.
HTH
--
Radoslaw Skorupka
Lodz, Poland
--
BRE Bank SA
ul. Senatorska 18
00-950 Warszawa
www.brebank.pl
Sd Rejonowy dla m. st. Warszawy
XII Wydzia Gospodarczy Krajowego Rejestru Sdowego,
nr rejestru przedsibiorców KRS 0000025237
NIP: 526-021-50-88
Wedug stanu na dzie 01.01.2007 r. kapita zakadowy BRE Banku SA (w caoci
opacony) wynosi 118.064.140 z. W zwizku z realizacj warunkowego
podwyszenia kapitau zakadowego, na podstawie uchwa XVI WZ z dnia 21.05.2003
r., kapita zakadowy BRE Banku SA moe ulec podwyszeniu do kwoty 118.760.528
z. Akcje w podwyszonym kapitale zakadowym bd w caoci opacone.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
