YES, correct _________________________________________________________________________ Paolo Cacciari IBM Italia S.p.A. Business Continuity and Resiliency Services, IBM Global Services - South Region, EMEA
From: Lizette Koehler <[email protected]> To: [email protected] Date: 11/05/2009 16.55 Subject: Re: EKM and Hash Keys Sent by: IBM Mainframe Discussion List <[email protected]> Okay, so if I understand. I get the public key from the 3rd party client. I import the key into my environment. I code my JCL to use // KEYLABL1=?MyEKMServerJCEKS?, // KEYENCD1=L, // KEYLABL2=?CompanyXPublicKeyJCEKS?, // KEYENCD2=H, Where my public key is called MyEKMServerJCEKS and the 3rd party's public key is called CompayXPublicKeyJCEKS that I had imported into my system. My system is setup to use the JCERACFKS keystore for encryption with E05 Tape Drives in a TS3500. The KEYENCD2=H is where the HASH is handled? Lizette > >>I have not worked with this yet. My 3rd party wants me to use HASH >instead of Dataclas for encrypting a tape. (I think I understood that >correctly???) > >>So what is the difference between using a HASH KEY and a DATACLAS with >EKM? > >>I am reading the books, but I still get lost in them. > >Lizette, > >maybe there's been some sort of misunderstanding.... HASH is a MODE of >using a KEY to encrypt data on tape; the other one is LABEL. >Usually you use HASH when are encrypting data using a PUBLIC certificate >coming from a partner.... > >You can declare HASH mode in SMS dataclas or in DD JCL. > >Hope this helps. > > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html IBM Italia S.p.A. Sede Legale: Circonvallazione Idroscalo - 20090 Segrate (MI) Cap. Soc. euro 400.001.359 C. F. e Reg. Imprese MI 01442240030 - Partita IVA 10914660153 Società soggetta all?attività di direzione e coordinamento di International Business Machines Corporation (Salvo che sia diversamente indicato sopra / Unless stated otherwise above) ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
