Lizette,

Based on your other posts, I believe you are using the IBM TS1120/TS1130 
encryption devices. In that case, as Mike Wood indicated, whatever file-1 is 
the rest of the tape will be the same. So, if file-1 is encrypted all the other 
files will be encrypted (no way to turn it off). Or, if file-1 is not 
encrypted; then no-encryption even if the dataclass asks for it to be 
encrypted. Of course, no such limitation exists with CA Tape Encryption ;)

And, from everything I have heard there is very little clock-time delay when 
writing to one of these devices with encryption enabled. However, I have not 
been able to test their performance, so there might be some.

And lastly, I believe you got the information on the OPENTECH or Copycat 
product incorrect. Whenever an encrypted tape is read on a TS1120/TS1130 
device; if the key is available it will be decrypted. And if the key is not 
available it will not be read. In other words, there is no way to read the data 
in its encrypted form. So if you use any type of tape copy utility to copy from 
one tape to another; you will decrypt the data as you read it and the 
(hopefully) re-encrypt it as it is be written. Of course, if the ACS rules are 
based on DSN it will probably still be encrypted (unless you renamed the copy). 
But if your ACS rules are based on jobname and/or program-name; then it is very 
possible the copy will not be encrypted.

Russell Witt
CA 1 L2 Support Manager

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]]on
Behalf Of Lizette Koehler
Sent: Tuesday, July 14, 2009 11:52 AM
To: [email protected]
Subject: Re: TAPE Encryption


Mark,

I agree with your statement.  My concern is that some want to set up the ACS 
code to be generic, 

IF (&DSN=PROD.**) Then DATACLAS=ENCRYPT.

I want to update the JCL on just the first file to include the DATACLAS=ENCRYPT.

So I am trying to figure it out the price of doing all the files individually 
on a stacked tape.  Would iit slow down the process, and if it does, how can I 
calculate it?  I know there is a some XX seconds it takes to do the encryption. 
 If I have 35 files being encrypted on the tape, then I expect the answer 
should be 35 times XX seconds in delay of the job finishing.

I am also told that if I use OPENTECH or COPYCAT to copy these stacked volumes 
to an offsite tape, then I do not need to encrypt the offsite tape as the files 
being copied are encrypted to start with.  So the offsite tape becomes 
encrypted by default.  Or did I get that wrong?

Lizette

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to