The accessing of encrypted data is done from the restored system. The system I'm asking about, without the required maintenance restores volumes, which includes the ICSF databases, production catalogs,...Once everything is restored from the bootstrap environment, we IPL the restored production environment.
Mark Jacobs Mike Schwab<mailto:mike.a.sch...@gmail.com> January 31, 2018 at 6:55 PM Since the restore is run without the PTF, it won't restore the encryption key and you won't be able to access the file after IPLing with the PTF. On Wed, Jan 31, 2018 at 5:34 PM, Mark Jacobs - Listserv <mark.jac...@custserv.com><mailto:mark.jac...@custserv.com> wrote: > That's all we're looking for. The system in question is used as our DR > bootstrap system that restores logically dumped volumes. There's no need to > access encrypted data on that system once restored. > > Mark Jacobs > > Mike Schwab<mailto:mike.a.sch...@gmail.com><mailto:mike.a.sch...@gmail.com> > January 31, 2018 at 3:02 PM > http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf<http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf><http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf<http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf>> > Printed page 4: > z/OS 2.2 with OA50569 can create encrypted datasets. > z/OS 2.1 with OA50569 cannot create encrypted datasets, can read > encrypted datasets from 2.2. > > So without OA50569, I would assume it would not recognized that it was > encrypted. It would restore but you could not decrypt it. > > On Wed, Jan 31, 2018 at 12:46 PM, Mark Jacobs - Listserv > <mark.jac...@custserv.com><mailto:mark.jac...@custserv.com><mailto:mark.jac...@custserv.com><mailto:mark.jac...@custserv.com> > wrote: >> I'm not seeing any reason why not, but can a zOS 2.2 system without the >> required maintenance (OA50569) restore logically dumped volumes using >> ADRDSSU that contain datasets encrypted by a zOS 2.2 system that has the >> maintenance applied? There will be no access to this encrypted data on >> the restoring system other than the restore from tape. >> -- >> *One grows tired of jelly babies, Castellan. One grows tired of almost >> everything, Castellan, except power. >> -- The Doctor, in David Agnew's _The Invasion of Time_* >> >> >> ---------------------------------------------------------------------- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to >> lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu><mailto:lists...@listserv.ua.edu><mailto:lists...@listserv.ua.edu> >> with the message: INFO IBM-MAIN > > > > -- > Mike A Schwab, Springfield IL USA > Where do Forest Rangers go to get away from it all? > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to > lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu><mailto:lists...@listserv.ua.edu><mailto:lists...@listserv.ua.edu> > with the message: INFO IBM-MAIN > > > Please be alert for any emails that may ask you for login information or > directs you to login via a link. If you believe this message is a phish or > aren't sure whether this message is trustworthy, please send the original > message as an attachment to > 'phish...@timeinc.com<mailto:phish...@timeinc.com><mailto:phish...@timeinc.com><mailto:phish...@timeinc.com>'. > > Mark Jacobs - > Listserv<mailto:mark.jac...@custserv.com><mailto:mark.jac...@custserv.com> > January 31, 2018 at 1:46 PM > I'm not seeing any reason why not, but can a zOS 2.2 system without the > required maintenance (OA50569) restore logically dumped volumes using ADRDSSU > that contain datasets encrypted by a zOS 2.2 system that has the maintenance > applied? There will be no access to this encrypted data on the restoring > system other than the restore from tape. > > -- > > Mark Jacobs > Time Customer Service > Global Technology Services > > The standard you walk past is the standard you accept. > Lt. Gen. David Morrison > > > This electronic message, including any attachments, may contain proprietary, > confidential or privileged information for the sole use of the intended > recipient(s). You are hereby notified that any unauthorized disclosure, > copying, distribution, or use of this message is prohibited. If you have > received this message in error, please immediately notify the sender by reply > e-mail and delete it. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with > the message: INFO IBM-MAIN -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with the message: INFO IBM-MAIN Mark Jacobs - Listserv<mailto:mark.jac...@custserv.com> January 31, 2018 at 6:34 PM That's all we're looking for. The system in question is used as our DR bootstrap system that restores logically dumped volumes. There's no need to access encrypted data on that system once restored. Mark Jacobs Mike Schwab<mailto:mike.a.sch...@gmail.com> January 31, 2018 at 3:02 PM http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf<http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf> Printed page 4: z/OS 2.2 with OA50569 can create encrypted datasets. z/OS 2.1 with OA50569 cannot create encrypted datasets, can read encrypted datasets from 2.2. So without OA50569, I would assume it would not recognized that it was encrypted. It would restore but you could not decrypt it. On Wed, Jan 31, 2018 at 12:46 PM, Mark Jacobs - Listserv <mark.jac...@custserv.com><mailto:mark.jac...@custserv.com> wrote: > I'm not seeing any reason why not, but can a zOS 2.2 system without the > required maintenance (OA50569) restore logically dumped volumes using > ADRDSSU that contain datasets encrypted by a zOS 2.2 system that has the > maintenance applied? There will be no access to this encrypted data on > the restoring system other than the restore from tape. > -- > *One grows tired of jelly babies, Castellan. One grows tired of almost > everything, Castellan, except power. > -- The Doctor, in David Agnew's _The Invasion of Time_* > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with > the message: INFO IBM-MAIN -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with the message: INFO IBM-MAIN Please be alert for any emails that may ask you for login information or directs you to login via a link. If you believe this message is a phish or aren't sure whether this message is trustworthy, please send the original message as an attachment to 'phish...@timeinc.com<mailto:phish...@timeinc.com>'. Mark Jacobs - Listserv<mailto:mark.jac...@custserv.com> January 31, 2018 at 1:46 PM I'm not seeing any reason why not, but can a zOS 2.2 system without the required maintenance (OA50569) restore logically dumped volumes using ADRDSSU that contain datasets encrypted by a zOS 2.2 system that has the maintenance applied? There will be no access to this encrypted data on the restoring system other than the restore from tape. -- Mark Jacobs Time Customer Service Global Technology Services The standard you walk past is the standard you accept. Lt. Gen. David Morrison This electronic message, including any attachments, may contain proprietary, confidential or privileged information for the sole use of the intended recipient(s). You are hereby notified that any unauthorized disclosure, copying, distribution, or use of this message is prohibited. If you have received this message in error, please immediately notify the sender by reply e-mail and delete it. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
