Hi All,
 
   I've got a bit of a problem with EKM.  We're z/OS 1.9, using EKM with
Java 1.4.2 (sr10).  We're using a JCEKS keystore
 
   Library (TS3100 w/ LTO4 drives) is attached to an iSeries 520 with
V5R3.
 
   iSeries SysAdmin can write tapes, but can't read them.
 
   Upon viewing the audit.log I see what appears to be some translation
happening with the symmetric keys that were set up for these devices.
 
   Given: zoscompatibility=true, and symmetricKeySet = AES01-0F.
 
   When the tape is written, it seems to be assinged a key in this
format: (some zeros removed for clarity):
 
   aes000....1
 
   When the tape is read, the key is in the format (as reported by EKM):
 
   414553000....1
 
   Isn't that ascii?  The read fails because it can't fine the above key
in the keystore.
 
   I have a PMR open with IBM, but figured I'd check here as well.  Any
ideas?
 
Thanks!
BobL
 
 
 
   

------------------------------------------------------------------------------
This e-mail transmission may contain information that is proprietary, 
privileged and/or confidential and is intended exclusively for the person(s) to 
whom it is addressed. Any use, copying, retention or disclosure by any person 
other than the intended recipient or the intended recipient's designees is 
strictly prohibited. If you are not the intended recipient or their designee, 
please notify the sender immediately by return e-mail and delete all copies. 
OppenheimerFunds may, at its sole discretion, monitor, review, retain and/or 
disclose the content of all email communications. 
==============================================================================

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to