Yes, CTC does support AES-256, but you have to specify which key you are going to use as part of your control statements. Likewise, DFSMSdss DUMP does - but as control statements you specifically code. What about good old IEBGENER, IDCAMS or even DFSort? Lots of utilities create tape data sets, and there are a LOT of ways to get these tape data sets to the cloud. However, if the original tape data set itself was not encrypted; you are left with "data at rest" encryption up in the cloud.
Russell Witt [email protected] CA 1 Flexible Storage Programmer -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Timothy Sipples Sent: Monday, July 21, 2025 11:59 PM To: [email protected] Subject: Re: BMC's AMI Cloud ... SNIP... >This needs to be done on all MF Data being stored in the cloud as well. >Currently, CA 1 Flexible Storage is the only way to encrypt your tape >date AS it is being created. So, you can move the data to the cloud >with the safety of knowing it was encrypted at home (with the keys >stored in your Mainframe CKDS database) before it leaves home. I'm not sure what you mean here. Glenn specifically mentioned IBM Cloud Tape Connector for z/OS. Cloud Tape Connector for z/OS has supported server-side AES-256 encryption since November 11, 2018 (Version 2.1's general availability date). Cloud Tape Connector for z/OS is available separately as IBM Program Number 5698-ABM or as part of the IBM Z Advanced Storage Management Suite (IBM Program No. 5698-BT1). As another example, DFSMSdss DUMP has supported host-based encryption for a long time; I think it's been at least 20 years. ————— Timothy Sipples Senior Architect Digital Assets, Industry Solutions, and Cybersecurity IBM Z/LinuxONE, Asia-Pacific [email protected] ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
