Re: DFSMSrmm Tape encryption
I have had 2 customers implement TKLM in both their production and DR sites recently and neither had any difficulty. We actually spent much less than one week getting it up and running (elapsed time was longer due to change control). We never had to install Websphere or DB2 to use TKLM. We did need to make sure that we had the SDK (JAVA) installed if we wanted TKLM to run under z/OS. My customer actually chose to install one instance of TKLM on AIX and one on z/OS. The only other decision to make is the keystore and I can assure you that DB2 is not required. Adolph Kahan GlassHouse Systems Inc. 416-229-2950 Ext 304 -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Russell Witt Sent: Thursday, February 18, 2010 12:14 AM To: IBM-MAIN@bama.ua.edu Subject: Re: DFSMSrmm Tape encryption TKLM is IBM's new Tivoli Key Lifecycle Manager and is the replacement for EKM. While EKM is (was) a no-cost download; I believe (could be wrong) TKLM is an extra-cost software product that requires WebSphere (oh goody-goody). And while EKM can still be downloaded, the statement on the IBM web-site is that it is only for existing clients and new clients must use TKLM. And to be honest, as Lizette has indicated in earlier posts even EKM is not that easy to install. While key management of the tape encryption keys is critical (that is why we have CA Key Manager as well); I really don't see why it needs to be made so difficult. Granted, no-one wants to lose the keys since their existing tape data would suddenly become un-accessable. So you need to balance the ability to have multiple copies stored in secure locations with having enough security that only authorized systems can access them. But the installation should not require a month of effort, especially at the DR location. Just my own 2-cents worth of opinion here. Russell Witt -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu]on Behalf Of Richard Peurifoy Sent: Wednesday, February 17, 2010 5:54 PM To: IBM-MAIN@bama.ua.edu Subject: Re: DFSMSrmm Tape encryption On 2/17/2010 5:04 PM, Tom Longfellow wrote: How did the installation of TKLM go? It has been a nightmare for us. Over a month of effort without a valid working install yet. And now we have to deal with getting an operational DB2 and WebSphere app server (SSRE) system at our DR site before we can read any encrypted data. Running SSRE takes more storage frames that our major subsystems. The overhead in software to activate this 'hardware' feature is becoming more trouble than it is worth. I can't speak for Mark, but we don't have TKLM. I am not even sure what it does. I just installed an EKM server on z/OS (did take a while to get all the JAVA pieces worked out), and created a key through RACF. I use SMS to control what gets encrypted (by default everything). The only thing we are writing are backups, so they all use the same key. Key management could get to be a problem if you needed lots of keys. -- Richard -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html __ Information from ESET NOD32 Antivirus, version of virus signature database 4875 (20100217) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 4875 (20100217) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: End of service for 3490-A20 and 3490-B40
Type Model Announced Available Marketing Withdrawn Service Discontinued 3490-A011989/10/24 1990/02/01 1994/12/27 - 3490-A021989/10/24 1989/11/01 1994/12/27 - 3490-A101991/02/19 1992/04/01 1998/09/25 - 3490-A201991/02/19 1992/04/01 1998/09/25 - 3490-B021990/05/22 1990/06/29 1994/12/27 2007/12/31 3490-B041989/10/24 1989/11/01 1994/12/27 - 3490-B201991/02/19 1991/04/01 1997/05/30 2010/12/31 3490-B401991/02/19 1991/04/01 1998/09/25 - 3490-C1A1993/09/07 1993/12/17 1998/09/25 2007/12/31 3490-C101992/02/18 1992/04/17 1998/09/25 2007/12/31 3490-C111992/02/18 1992/04/17 1998/09/25 - 3490-C2A1993/09/07 1993/12/17 1998/09/25 - 3490-C221992/02/18 1992/04/17 1998/09/25 - 3490-D311989/08/21 1989/10/27 1994/03/18 - 3490-D321989/08/21 1989/10/27 1994/03/18 - 3490-D411991/02/19 1991/06/14 1992/12/15 - 3490-D421991/02/19 1991/06/14 1992/12/15 - 3490-E011994/02/01 1994/03/25 1997/05/09 - 3490-E111994/02/01 1994/03/25 1997/05/09 - 3490-FC01998/03/03 1998/03/20 2002/06/28 - 3490-F001997/02/11 1997/02/21 2002/06/28 - 3490-F011997/02/11 1997/02/21 2002/06/28 - 3490-F1A1997/10/06 1997/12/05 2002/06/28 - 3490-F111997/02/11 1997/02/21 2002/06/28 - Adolph Kahan GlassHouse Systems Inc. 416-229-2950 Ext 304 -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Nigel Salway Sent: Thursday, February 11, 2010 3:51 PM To: IBM-MAIN@bama.ua.edu Subject: End of service for 3490-A20 and 3490-B40 Dear Friends, I have been looking for the end of service dates for the 3490-A20 and 3490-B40 in the announcment archive at http://www-01.ibm.com/common/ssi/ I haven't found any reference to these devices in the announcment letters which suggests to me there has been no announcement of end of service for these devices. As a check on my work, can I confirm with others on the list that I am both searching in the correct spot for this info and that finding nothing, there is no announced EOS for these devices. Cheers, Nigel Salway P.S. Thanks to everyone who sent me suggestions for software capable of outputting to PDF and then emailing. Your insight was invaluable to me. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html __ Information from ESET NOD32 Antivirus, version of virus signature database 4859 (20100211) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: HDS/USP Model 27 DASD and DB2
Mike, was the workload that you moved to the MOD-27 previously on mod3s or mod9s? We the original disks all in the same array or were they spread across multiple arrays? High disconnect time usually indicates not enough cache. Are you using cache partitioning? Adolph Kahan GlassHouse Systems Inc. 416-229-2950 Ext 304 -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Mike Shorkend Sent: Monday, December 28, 2009 1:58 PM To: IBM-MAIN@bama.ua.edu Subject: HDS/USP Model 27 DASD and DB2 Hello All, We have started experimenting with MOD-27 disks on a USP600 box. We have found that with DB2, response times have deteriorated significantly. We are seeing response times of more than 10ms on a fairly active disk. Disconnect time accounts for about 90% of the time. Cache disk ratio has gone down for these disks to less than 10%. HYPERPAV is active - IOSQ time is zero. zHPF is not enabled. z/OS 1.9. DB2 V8. We have opened an issue with Hitachi. Has anyone else experienced this in a similar configuration? Thanks Mike -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html __ Information from ESET NOD32 Antivirus, version of virus signature database 4723 (20091228) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com __ Information from ESET NOD32 Antivirus, version of virus signature database 4723 (20091228) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
Re: 3592 Cartridges
The TS7720 is a tapeless VTS. The TS7740 is the VTS with backend tape drives Sent from my iPhone On 2009-12-15, at 2:38 PM, Hal Merritt hmerr...@jackhenry.com wrote: I'm confused. I thought management of the physical tape was a function of the TS7720. -Original Message- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of George Rodriguez Sent: Monday, December 14, 2009 11:10 AM To: IBM-MAIN@bama.ua.edu Subject: 3592 Cartridges I've got a VTL (TS7720) and 2 3592 tape drives. A rexx exec was written, to use DFSMSdss to back up volumes for disk to the 3592. The problem is that the job is divided into 4 parts because of the step limitation. Is there a way of keeping the tape mounted and at the same position after job 1 completes? Thanks in advance. . . George Rodriguez Specialist II - IT Solutions Application Support / Quality Assurance PX - 47652 (561) 357-7652 (office) (561) 707-3496 (mobile) School District of Palm Beach County 3348 Forest Hill Blvd. Room B-332 West Palm Beach, FL. 33406-5869 Florida's Only A-Rated Urban District For Five Consecutive Years -- --Palm Beach County Schools- Rated A by the Florida Department of Education 2005-2009 -Home of Florida's first LEED Gold Certified School- ---http://www.palmbeachschools.org- The District of Palm Beach County is an Equal Education Opportunity Provider and Employer. Under Florida law, e-mail addresses are public records. If you do not want your e-mail address released in response to a public records request, do not send electronic mail to this entity. Instead, contact this office by phone or in writing. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
