The OP already said that the new location has no master keys set up in the CEC 
yet, so no encryption is available there at all.

Perhaps the old-fashioned way?  IDCAMS REPREO to unencrypted sequential and 
ADRDSSU DUMP the unencrypted sequential file for DEFINE/REPRO at the receiving 
end.  A bit more work, but not too much, though it AssUMes that the creation of 
unencrypted sequential is even allowed in the originating location.

Peter

-----Original Message-----
From: IBM Mainframe Discussion List <[email protected]> On Behalf Of 
Mike Schwab
Sent: Wednesday, November 3, 2021 3:51 PM
To: [email protected]
Subject: Re: ADRDSSU and encrypted files

There are published ways of transferring your keys to read your encrypted files.

On Wed, Nov 3, 2021 at 6:25 PM Cameron Conacher 
<[email protected]> wrote:
>
> The issue is we have a new environment.
> We need to move our data to the new environment.
> The new environment has no Master Encryption Keys. Yet.
> I can read the original file (I have access).
> I DUMP and send to the new environment and the file is encrypted, and without 
> keys, I cannot read it.
>
> Pervasive Encryption is working just as I would expect.
> I suppose, I simply cannot use ADRDSSU to DUMP/RESTORE.
> I can plan around that.
>
> Thanks,
>
> .......Cameron
>
>
>
>
> From: IBM Mainframe Discussion List <[email protected]> On 
> Behalf Of Seymour J Metz
> Sent: Wednesday, November 3, 2021 2:13 PM
> To: [email protected]
> Subject: [External] Re: ADRDSSU and encrypted files
>
> Is that something that your management allows? At some places that would be a 
> massive security violation.
>
> ________________________________________
> From: IBM Mainframe Discussion List 
> <[email protected]<mailto:[email protected]>> on behalf 
> of Cameron Conacher 
> <[email protected]<mailto:000003cfc59146b
> [email protected]>>
> Sent: Wednesday, November 3, 2021 2:01 PM
> To: [email protected]<mailto:[email protected]>
> Subject: ADRDSSU and encrypted files
>
> Hello folks,
> I have a situation here where I want to use ADRDSSU to DUMP a VSAM file (it 
> is encrypted) and then transfer the DUMP file to another system where 
> encryption is not supported.
> When I restore the files in the target environment, the VSAM file shows as 
> encrypted, but since I have no keys the file cannot be read.
>
> My question is, "is there anyway to tell ADRDSSU DUMP or RESTORE" to decrypt 
> the file before duping or before restoring?
>
>
> Thanks
--

This message and any attachments are intended only for the use of the addressee 
and may contain information that is privileged and confidential. If the reader 
of the message is not the intended recipient or an authorized representative of 
the intended recipient, you are hereby notified that any dissemination of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify us immediately by e-mail and delete the message and any 
attachments from your system.


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to