http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf
On printed page 4 of the manual, here is the topic and first paragraph. Before enabling this function Because data set encryption has both hardware and software requirements, you must consider all systems that share data with a system on which you plan to enable data set encryption before creating an encrypted data set. This includes backout software levels, backup systems, read-only systems, replication target systems and disaster recovery systems. Before encrypting data sets other than those used for testing, be sure that all the systems that must access encrypted data sets are capable of doing so by meeting the required hardware and software requirements. In addition to the hardware and software requirements that must be available on every system that will access the encrypted data sets, all key labels and encryption keys associated with the encrypted data sets must also be available. On Wed, Jan 31, 2018 at 6:01 PM, Mark Jacobs - Listserv <mark.jac...@custserv.com> wrote: > The accessing of encrypted data is done from the restored system. The system > I'm asking about, without the required maintenance restores volumes, which > includes the ICSF databases, production catalogs,...Once everything is > restored from the bootstrap environment, we IPL the restored production > environment. > > Mark Jacobs > > Mike Schwab<mailto:mike.a.sch...@gmail.com> > January 31, 2018 at 6:55 PM > Since the restore is run without the PTF, it won't restore the > encryption key and you won't be able to access the file after IPLing > with the PTF. > > On Wed, Jan 31, 2018 at 5:34 PM, Mark Jacobs - Listserv > <mark.jac...@custserv.com><mailto:mark.jac...@custserv.com> wrote: >> That's all we're looking for. The system in question is used as our DR >> bootstrap system that restores logically dumped volumes. There's no need to >> access encrypted data on that system once restored. >> >> Mark Jacobs >> >> Mike Schwab<mailto:mike.a.sch...@gmail.com><mailto:mike.a.sch...@gmail.com> >> January 31, 2018 at 3:02 PM >> http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf<http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf><http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf<http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf>> >> Printed page 4: >> z/OS 2.2 with OA50569 can create encrypted datasets. >> z/OS 2.1 with OA50569 cannot create encrypted datasets, can read >> encrypted datasets from 2.2. >> >> So without OA50569, I would assume it would not recognized that it was >> encrypted. It would restore but you could not decrypt it. >> >> On Wed, Jan 31, 2018 at 12:46 PM, Mark Jacobs - Listserv >> <mark.jac...@custserv.com><mailto:mark.jac...@custserv.com><mailto:mark.jac...@custserv.com><mailto:mark.jac...@custserv.com> >> wrote: >>> I'm not seeing any reason why not, but can a zOS 2.2 system without the >>> required maintenance (OA50569) restore logically dumped volumes using >>> ADRDSSU that contain datasets encrypted by a zOS 2.2 system that has the >>> maintenance applied? There will be no access to this encrypted data on >>> the restoring system other than the restore from tape. >>> -- >>> *One grows tired of jelly babies, Castellan. One grows tired of almost >>> everything, Castellan, except power. >>> -- The Doctor, in David Agnew's _The Invasion of Time_* >>> >>> >>> ---------------------------------------------------------------------- >>> For IBM-MAIN subscribe / signoff / archive access instructions, >>> send email to >>> lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu><mailto:lists...@listserv.ua.edu><mailto:lists...@listserv.ua.edu> >>> with the message: INFO IBM-MAIN >> >> >> >> -- >> Mike A Schwab, Springfield IL USA >> Where do Forest Rangers go to get away from it all? >> >> ---------------------------------------------------------------------- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to >> lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu><mailto:lists...@listserv.ua.edu><mailto:lists...@listserv.ua.edu> >> with the message: INFO IBM-MAIN >> >> >> Please be alert for any emails that may ask you for login information or >> directs you to login via a link. If you believe this message is a phish or >> aren't sure whether this message is trustworthy, please send the original >> message as an attachment to >> 'phish...@timeinc.com<mailto:phish...@timeinc.com><mailto:phish...@timeinc.com><mailto:phish...@timeinc.com>'. >> >> Mark Jacobs - >> Listserv<mailto:mark.jac...@custserv.com><mailto:mark.jac...@custserv.com> >> January 31, 2018 at 1:46 PM >> I'm not seeing any reason why not, but can a zOS 2.2 system without the >> required maintenance (OA50569) restore logically dumped volumes using >> ADRDSSU that contain datasets encrypted by a zOS 2.2 system that has the >> maintenance applied? There will be no access to this encrypted data on the >> restoring system other than the restore from tape. >> >> -- >> >> Mark Jacobs >> Time Customer Service >> Global Technology Services >> >> The standard you walk past is the standard you accept. >> Lt. Gen. David Morrison >> >> >> This electronic message, including any attachments, may contain proprietary, >> confidential or privileged information for the sole use of the intended >> recipient(s). You are hereby notified that any unauthorized disclosure, >> copying, distribution, or use of this message is prohibited. If you have >> received this message in error, please immediately notify the sender by >> reply e-mail and delete it. >> >> ---------------------------------------------------------------------- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with >> the message: INFO IBM-MAIN > > > > -- > Mike A Schwab, Springfield IL USA > Where do Forest Rangers go to get away from it all? > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with > the message: INFO IBM-MAIN > Mark Jacobs - Listserv<mailto:mark.jac...@custserv.com> > January 31, 2018 at 6:34 PM > That's all we're looking for. The system in question is used as our DR > bootstrap system that restores logically dumped volumes. There's no need to > access encrypted data on that system once restored. > > Mark Jacobs > > > Mike Schwab<mailto:mike.a.sch...@gmail.com> > January 31, 2018 at 3:02 PM > http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf<http://publibz.boulder.ibm.com/zoslib/pdf/OA50569.pdf> > Printed page 4: > z/OS 2.2 with OA50569 can create encrypted datasets. > z/OS 2.1 with OA50569 cannot create encrypted datasets, can read > encrypted datasets from 2.2. > > So without OA50569, I would assume it would not recognized that it was > encrypted. It would restore but you could not decrypt it. > > On Wed, Jan 31, 2018 at 12:46 PM, Mark Jacobs - Listserv > <mark.jac...@custserv.com><mailto:mark.jac...@custserv.com> wrote: >> I'm not seeing any reason why not, but can a zOS 2.2 system without the >> required maintenance (OA50569) restore logically dumped volumes using >> ADRDSSU that contain datasets encrypted by a zOS 2.2 system that has the >> maintenance applied? There will be no access to this encrypted data on >> the restoring system other than the restore from tape. >> -- >> *One grows tired of jelly babies, Castellan. One grows tired of almost >> everything, Castellan, except power. >> -- The Doctor, in David Agnew's _The Invasion of Time_* >> >> >> ---------------------------------------------------------------------- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with >> the message: INFO IBM-MAIN > > > > -- > Mike A Schwab, Springfield IL USA > Where do Forest Rangers go to get away from it all? > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with > the message: INFO IBM-MAIN > > > Please be alert for any emails that may ask you for login information or > directs you to login via a link. If you believe this message is a phish or > aren't sure whether this message is trustworthy, please send the original > message as an attachment to > 'phish...@timeinc.com<mailto:phish...@timeinc.com>'. > > Mark Jacobs - Listserv<mailto:mark.jac...@custserv.com> > January 31, 2018 at 1:46 PM > I'm not seeing any reason why not, but can a zOS 2.2 system without the > required maintenance (OA50569) restore logically dumped volumes using ADRDSSU > that contain datasets encrypted by a zOS 2.2 system that has the maintenance > applied? There will be no access to this encrypted data on the restoring > system other than the restore from tape. > > -- > > Mark Jacobs > Time Customer Service > Global Technology Services > > The standard you walk past is the standard you accept. > Lt. Gen. David Morrison > > > This electronic message, including any attachments, may contain proprietary, > confidential or privileged information for the sole use of the intended > recipient(s). You are hereby notified that any unauthorized disclosure, > copying, distribution, or use of this message is prohibited. If you have > received this message in error, please immediately notify the sender by reply > e-mail and delete it. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- Mike A Schwab, Springfield IL USA Where do Forest Rangers go to get away from it all? ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
