Records are in the CKDS and PKDS. We've defined a TKDS, but not using it
for anything yet.
For zOS Encryption Services for zOS we'd need to define new AES-256 keys
in the CKDS. Before ICSF is functional, and the ICSF master keys
installed into the cryptographic hardware, we won't be able to read any
encrypted zOS dataset.
Mark Jacobs
Rob Schramm <mailto:[email protected]>
September 20, 2017 at 1:34 PM
Well that is either a good thing or a bad thing.
What kind of keys are you storing?
On Wed, Sep 20, 2017, 12:11 PM Mark Jacobs - Listserv <
Mark Jacobs - Listserv <mailto:[email protected]>
September 20, 2017 at 12:10 PM
No. Don't have, not likely to get one.
Mark Jacobs
Rob Schramm <mailto:[email protected]>
September 20, 2017 at 12:09 PM
1st Question
Do you have/need a TKE?
Rob
On Wed, Sep 20, 2017, 10:31 AM Mark Jacobs - Listserv <
--
Rob Schramm
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
Please be alert for any emails that may ask you for login information
or directs you to login via a link. If you believe this message is a
phish or aren't sure whether this message is trustworthy, please send
the original message as an attachment to '[email protected]'.
Mark Jacobs - Listserv <mailto:[email protected]>
September 20, 2017 at 10:31 AM
Is there anything like a best practices document available from IBM or
Share on setting this up? I just started thinking about all the bits
and pieces and was concerned about how having this enabled affects the
timeline/method of entering the ICSF Master Keys during a DR situation
or processor upgrade. I'm sure there's plenty of other considerations
too.
Mark Jacobs
--
Mark Jacobs
Time Customer Service
Global Technology Services
The standard you walk past is the standard you accept.
Lt. Gen. David Morrison
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
