Arye,
In general, if you value the data that hsm has placed on tape, you should
ensure that the data is protected. This means there has to be some RACF profile
(or equivalent) protecting the volume or the data, and the system (or some
other involved party) has to make the RACROUTE call to
Hello dear experts.
I have a customer who is considering using HSM (never used HSM before).
We are trying to understand if when using TAPESECURITY(RACF) option of HSM
We also have to add manually each HSM VOLSER into the RACF TAPEVOL HSMABR
profile.
We are getting mixed and confusing messages
: Wednesday, November 27, 2013 8:05 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: DFSMSHSM TAPESECURITY(RACF)
Hello dear experts.
I have a customer who is considering using HSM (never used HSM before).
We are trying to understand if when using TAPESECURITY(RACF) option of HSM
We also have to add
handles the expiration issues.
:: -Original Message-
:: From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
:: Behalf Of Arye Shemer
:: Sent: Wednesday, November 27, 2013 7:05 AM
:: To: IBM-MAIN@LISTSERV.UA.EDU
:: Subject: DFSMSHSM TAPESECURITY(RACF)
::
:: Hello dear experts
Message-
:: From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
On
:: Behalf Of Arye Shemer
:: Sent: Wednesday, November 27, 2013 7:05 AM
:: To: IBM-MAIN@LISTSERV.UA.EDU
:: Subject: DFSMSHSM TAPESECURITY(RACF)
::
:: Hello dear experts.
::
:: I have a customer who
Arye Shemer wrote:
He intial request was to take the strictest security method HSM provide
(TAPESECURITY(RACF)).
What we're using:
SETSYS NORACFIND
SETSYS TAPESECURITY(RACF)
SETSYS NOERASEONSCRATCH
SETSYS NOPROFILEBACKUP
These settings are practical for us with good security. YMMV.
