Thanks Mike.
ABARS is great for this type of use case. ABACKUP with the MOVE option will
backup all data types (no recall for migrated data) and delete the original
copies, including the migrated data sets. Thus creating a single backup of all
of the related data. Essentially, an Archive
ABARS does not recall datasets. ABARS copies the VTape ML1/2/backup to the
new archive tape.
https://www.ibm.com/docs/en/zos/2.3.0?topic=guide-aggregate-backup-recovery-support-abars
On Thu, Nov 23, 2023 at 12:59 PM Jack Zukt wrote:
> Hi,
> You coul use HSM ABARs. It will recall any migrated
On Thu, 23 Nov 2023 22:47:59 +0100, Radoslaw Skorupka
wrote:
>Well, Keith metioned *a switch*.
Turning on the switch implies that everyone agreed that the feature benefits
are more important than the risks. This is acceptable because IBM warned you
and your company accepted the risks.
W dniu 23.11.2023 o 22:32, Jon Perryman pisze:
On Thu, 23 Nov 2023 19:47:24 +, Keith Gooding wrote:
I certainly would like the option to tell dss to recall datasets
I feel your pain but I personally agree with IBM's decision. Realize this is
z/OS with specialists instead UNIX with its
On Thu, 23 Nov 2023 19:47:24 +, Keith Gooding wrote:
>I certainly would like the option to tell dss to recall datasets
I feel your pain but I personally agree with IBM's decision. Realize this is
z/OS with specialists instead UNIX with its jack of all trades. DASD sysprog,
performa
Jon.
I certainly would like the option to tell dss to recall datasets so that they
can be copied or backed up. A common use case for me is to back up , or copy
and rename, a set of software libraries for archiving or distribution to
another system (a bit like a zOSMF portable software instance
W dniu 23.11.2023 o 20:11, Jon Perryman pisze:
On Thu, 23 Nov 2023 17:57:53 +0100, Radoslaw Skorupka
wrote:
I need to dump a lot of small dataset with HLQ=user_to_be_deleted.
Since the user is no longer active, most of. datasets are migrated to ML1
and ML2.
Do you really need another backup
IBM do not have an option for adrdssu to go the recall
automatically - there have been some requests on IBM ideas.
This recall method does not work for more complicated dss filters such as
“MYID.**.DATA”
Keith Gooding
On 23 Nov 2023, at 17:32, Radoslaw
Skorupka<0471ebeac275-dmarc-r
On Thu, 23 Nov 2023 18:18:23 +, Keith Gooding wrote:
>I do not know why IBM do not have an option for adrdssu to go the recall
>automatically - there have been some requests on IBM ideas.
The last thing you want is for ADRDSSU to become long running waiting on
multiple recalls from
On Thu, 23 Nov 2023 17:57:53 +0100, Radoslaw Skorupka
wrote:
>I need to dump a lot of small dataset with HLQ=user_to_be_deleted.
>Since the user is no longer active, most of. datasets are migrated to ML1
>and ML2.
Do you really need another backup since HSM already backed them up? If HRECALL
Hi,
You coul use HSM ABARs. It will recall any migrated dataset that matches
your filter.
Best wishes
Jack
On Thu, Nov 23, 2023, 16:58 Radoslaw Skorupka <
0471ebeac275-dmarc-requ...@listserv.ua.edu> wrote:
> I need to dump a lot of small dataset with HLQ=user_to_be_deleted.
> Since the user
for more complicated dss filters such as
“MYID.**.DATA”
Keith Gooding
> On 23 Nov 2023, at 17:32, Radoslaw Skorupka
> <0471ebeac275-dmarc-requ...@listserv.ua.edu> wrote:
>
> Well, First, I DON'T WANT TO DELETE datasets. I wan to dump them to archive
> file.
> Second
Well, First, I DON'T WANT TO DELETE datasets. I wan to dump them to
archive file.
Second, I want to avoid manual typing/clicking.
:-)
--
Radoslaw Skorupka
Lodz, Poland
W dniu 23.11.2023 o 18:01, Steve Beaver pisze:
Bring the list up in 3.4 then do a hdelete
By every dsn and hit enter
Sent
Bring the list up in 3.4 then do a hdelete
By every dsn and hit enter
Sent from my iPhone
No one said I could type with one thumb
> On Nov 23, 2023, at 10:57, Radoslaw Skorupka
> <0471ebeac275-dmarc-requ...@listserv.ua.edu> wrote:
>
> I need to dump a lot of small dataset with
I need to dump a lot of small dataset with HLQ=user_to_be_deleted.
Since the user is no longer active, most of datasets are migrated to ML1
and ML2.
By default ADRDSSU does not process migrated datasets.
Is there any method to circumvent it?
It can be anything, including scripted "touch".
--
Of
Robert2 Gensler
Sent: Thursday, May 6, 2021 10:55 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [External] Re: DF/DSS copy command fast replication problem
Hi Rex,
There is an option in DEVSUPxx to enable FlashCopy on async pprc devices.
The option is FLASHCOPYTOGM and unfortunately it has not made
Mainframe Discussion List wrote on
05/05/2021 05:13:31 PM:
> From: "Pommier, Rex"
> To: IBM-MAIN@LISTSERV.UA.EDU
> Date: 05/05/2021 05:13 PM
> Subject: [EXTERNAL] Re: DF/DSS copy command fast replication problem
> Sent by: IBM Mainframe Discussion List
>
> Hi,
>
>
Of
Pommier, Rex
Sent: Wednesday, May 5, 2021 1:25 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: [External] DF/DSS copy command fast replication problem
Hello list,
I'm having a mental midget moment. I have an IBM DS array that is a PPRC
source to a second array. Some volumes are being replicated
Hello list,
I'm having a mental midget moment. I have an IBM DS array that is a PPRC
source to a second array. Some volumes are being replicated to the remote site
and others are not. I am doing dataset level flashcopy through DF/DSS COPY
commands from one SMS storage group to another
Mainframe Discussion List On Behalf Of
Nai, Dean
Sent: Wednesday, October 16, 2019 10:31 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: DSS
Hi,
I'm just reaching here because it's probably a hardware limitation but I'll
ask anyway. Our current backup solution is to flashcopy our volumes and then go
Hi,
I'm just reaching here because it's probably a hardware limitation but I'll
ask anyway. Our current backup solution is to flashcopy our volumes and then go
back and dump them to tape using DSS. Now we started backing up some of the
huge E3 volumes and it's been taking 50 minutes per
Has anyone written a utility that aids in the conversion from DF/DSS (ADRDSSU)
dump
by data set to Innovation Data Processing's FDRAPPL?
//STEP010 EXEC PGM=ADRDSSU
//SYSPRINT DD SYSOUT=*
//OUT DD DSN=DFDSS.DUMP.BY.DATA.SET,
// DISP=(NEW,CATLG,DELETE),UNIT=TAPE
//SYSINDD
> management
> .
> Does anyone have any idea as to how to resolve this?
> .
> I did find the following thread - https://groups.google.com/
> forum/#!topic/bit.listserv.ibm-main/mnyNGm6GzEg but it is referring more
> to the standalone DSS services
> .
> Thanks, Roger
>
>
um/#!topic/bit.listserv.ibm-main/mnyNGm6GzEg but
it is referring more to the standalone DSS services
.
Thanks, Roger
--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message
On 5 Feb 2016 15:25:43 -0800, in bit.listserv.ibm-main you wrote:
>On 2/5/2016 11:15 AM, Skip Robinson wrote:
>> One more point on standalone restore. IPLing from a tape volume basically
>> assumes that the tape is non-labelled. That is, the first record read is
>> expected to be a bootstrap
ectively mounts
>it in the drive!!!
>
>If this is documented in the 3584 Operations guide, I never found it. It
>should be CLEARLY documented there as well as in the DSS stand-alone
>restore procedures section under "Using a Tape Library". I will submit
>an RCF to get the z
...@att.net
> -Original Message-
> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
> On Behalf Of Crispin Hugo
> Sent: Thursday, February 4, 2016 11:58 PM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: [Bulk] Re: Stand-Alone DSS RESTORE with 3584 Library -
just one of those could be insurmountable.
>
>2. Tape technology has totally transformed. I haven't held a cartridge in my
>hand for years. What would I do with one anyway? Tape here is completely
>virtual except for a few 'real drives' that hold data offloaded from virtual.
>There is lite
ere is completely
>>virtual except for a few 'real drives' that hold data offloaded from virtual.
>>There is literally no place to insert and read a DSS recovery volume.
>
> For those who don't mirror to an off-site location, how would they
> restore the system to another box
:18 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Stand-Alone DSS RESTORE with 3584 Library - How??
On 2/4/2016 11:58 PM, Crispin Hugo wrote:
> I have not tried this personally but IBM System Storage TS3500 Tape Library
> GUI under section Cartridges allows one to select cartridge in L
Operations guide, I never found it. It
should be CLEARLY documented there as well as in the DSS stand-alone
restore procedures section under "Using a Tape Library". I will submit
an RCF to get the z/OS pub updated.
Many thanks to Crispin Hugo and Steve Finch for suggesting and
On 2/5/2016 9:40 AM, Gibney, David Allen,Jr wrote:
Have your DS8xxx brought to your current location, hook it up and populate,
power down, disconnect and ship it to the new place
Haha! I didn't see the winking smiley ( ;-) ) but I assume it's there:
1. Purchase and install new FICON
nframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
> On Behalf Of Steve Finch
> Sent: Friday, February 5, 2016 10:57 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: [Bulk] Re: Stand-Alone DSS RESTORE with 3584 Library - How??
>
> We do the manual cartridge move from a slot to a
5, 2016 9:13 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: Re: Stand-Alone DSS RESTORE with 3584 Library - How??
>
> I apologize for totally missing the context of the question. I was thinking
> recovery. We had the same problem when we installed new z12s in our
> brand-new da
rate Tieline - 89443
If you feel in control
you just aren't going fast enough.
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Ed Jaffe
Sent: Friday, February 05, 2016 12:18 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Stand-Alone
nframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
> On Behalf Of Ed Jaffe
> Sent: Friday, February 5, 2016 10:44 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: [Bulk] Re: Stand-Alone DSS RESTORE with 3584 Library - How??
>
> On 2/5/2016 9:40 AM, Gibney, David Allen,Jr wro
On 2/4/2016 11:58 PM, Crispin Hugo wrote:
I have not tried this personally but IBM System Storage TS3500 Tape Library
GUI under section Cartridges allows one to select cartridge in Library and
move it to a specific slot, the slot can be any of the cartridge drives in the
Library. I assume
Please let me know how it goes !
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Ed Jaffe
Sent: 05 February 2016 08:18
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Stand-Alone DSS RESTORE with 3584 Library - How??
On 2/4/2016 11:58 PM
LISTSERV.UA.EDU
> Subject: Re: Stand-Alone DSS RESTORE with 3584 Library - How??
>
> On 2/5/2016 9:40 AM, Gibney, David Allen,Jr wrote:
> > Have your DS8xxx brought to your current location, hook it up and
> > populate, power down, disconnect and ship it to the new place
>
On 2/5/2016 12:09 PM, Robert Haimowitz wrote:
You no longer need an ICKDSF IPL tape with the current DFDSS. Bob
Excellent. And, since this is z/OS 2.2 it should work fine... :-\
--
Edward E Jaffe
Phoenix Software International, Inc
831 Parkview Drive North
El Segundo, CA 90245
How about a virtual training aid that has Tape Gui and Internal Library
stack? Seems like a summer project for an intern.
In a message dated 2/5/2016 3:49:17 P.M. Central Standard Time,
alan_altm...@us.ibm.com writes:
and can click on HELP or the actual buttons, you're going to have
On 2/5/2016 1:49 PM, Alan Altmark wrote:
Ed, I don't think it's up to z/OS to document how to move cartridges
around in every tape library, nor appropriate for it to do so.
Perhaps not, but that's what they do. Don't worry, I won't send the same
RCF in for z/VM.
Your comment got me to
On 2/5/2016 11:15 AM, Skip Robinson wrote:
One more point on standalone restore. IPLing from a tape volume basically
assumes that the tape is non-labelled. That is, the first record read is
expected to be a bootstrap record. If a tape has labels, the first load will
fail, but the tape will be
kip.robin...@att.net>
Sent: Friday, February 5, 2016 1:15 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Stand-Alone DSS RESTORE with 3584 Library - How??
One more point on standalone restore. IPLing from a tape volume basically
assumes that the tape is non-labelled. That is, the first record read
Bob beat me to it! But I'll add this:
...when you specify NOVERIFY (or NVFY) on the RESTORE command.
Robert Haimowitz wrote:
You no longer need an ICKDSF IPL tape with the current DFDSS. Bob
--
John Eells
IBM Poughkeepsie
ee...@us.ibm.com
IBM-MAIN@LISTSERV.UA.EDU
Date: 02/05/2016 02:43 PM
Subject:Re: Stand-Alone DSS RESTORE with 3584 Library - How??
Sent by:IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU>
Also don't forget the stand alone ICKDSF IPL tape to init the disk drives
before a stand alo
n with
SA DSS RESTORE on file #1, a DASD volume with SA DSS RESTORE IPL text as
file #2, and enough other volumes on files #3 through #n to bring up a
simple MVS system that can then restore everything else -- including
z/VM, zLinux, z/VSE, etc.
We need to test the process here to be sure it
drive.
-Original Message-
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf
Of Ed Jaffe
Sent: 05 February 2016 07:38
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Stand-Alone DSS RESTORE with 3584 Library - How??
On 2/4/2016 9:58 PM, Skip Robinson wrote:
>
Is there any way to log in to issue a mount command within the tape library?
Maybe manually mount the Stand Alone Restore tape the first time.
Leave one Stand Alone DASD volume up and erase everything else after exercises?
Refresh by restoring to another volume then IPLing from it?
On Thu, Feb 4,
Learned Sysprogs:
In "z/OS DFSMSdss Storage Administration" in the chapter entitled,
"DFSMSdss stand-alone services" there is a section called "Using a tape
library" wherein detailed procedures document how to IPL (or otherwise
read) a tape from a 3494 or 3495 tape library into the
a cartridge in my
hand for years. What would I do with one anyway? Tape here is completely
virtual except for a few 'real drives' that hold data offloaded from virtual.
There is literally no place to insert and read a DSS recovery volume.
Instead of standalone restore, plan to recover a system
On 2/4/2016 7:17 PM, Mike Schwab wrote:
Is there any way to log in to issue a mount command within the tape library?
Not that I can find. http://publibfp.dhe.ibm.com/epubs/pdf/a3205604.pdf
--
Edward E Jaffe
Phoenix Software International, Inc
831 Parkview Drive North
El Segundo, CA 90245
-MAIN@LISTSERV.UA.EDU
Subject: Re: Stand-Alone DSS RESTORE with 3584 Library - How??
On 2/4/2016 7:17 PM, Mike Schwab wrote:
> Is there any way to log in to issue a mount command within the tape library?
Not that I can find. http://publibfp.dhe.ibm.com/epubs/pdf/a3205604.pdf
--
Edward E Ja
In <1239576652662657.wa.m42tomibmmainyahoo@listserv.ua.edu>, on
01/02/2016
at 10:14 PM, Tom Marchant
<000a2a8c2020-dmarc-requ...@listserv.ua.edu> said:
>http://bitsavers.trailing-edge.com/pdf/ibm/serviceForConsultants
Thanks for the link; it should be useful for wiki editing. Do you
Just found the archived announcement letter:
IBM Announcement Letter Number P80-114 dated June 11, 1980
DATA FACILITY/DATA SET SERVICES
RELEASE 1
5740-UT3
The Data Facility/Data Set Services program product assists
OS/VS (MVS and VS1) users with protection and recovery of
That's consistent with my recollection. Lots of ESP's(and APARs) back then
in prep for XA. Our storage folks were dismayed at performance and abends
so quickly switched to FDR and Sterling's DMS(?)
In a message dated 1/2/2016 10:14:37 P.M. Central Standard Time,
On 01/02/2016 04:04 PM, Stephen Mednick wrote:
> Looking to find the answer to the question "in which year did IBM release
> its DF/DSS backup & restore product.
>
> Cheers,
> Stephen Mednick
> Computer Supervisory Services
> Sydney, Australia
>
>
> Asia/Pa
On 01/02/2016 05:46 PM, Joel C. Ewing wrote:
> On 01/02/2016 04:04 PM, Stephen Mednick wrote:
>> Looking to find the answer to the question "in which year did IBM release
>> its DF/DSS backup & restore product.
>>
>> Cheers,
>> Stephen Mednick
>> Co
ibmm...@computersupervisoryservices.com (Stephen Mednick) writes:
> Looking to find the answer to the question "in which year did IBM release
> its DF/DSS backup & restore product.
some trivia from the web
https://www.ibm.com/developerworks/community/blogs/InsideSyst
On Sat, 2 Jan 2016 18:30:23 -0600, Joel C. Ewing wrote:
> An on-line copy of "Aug 83 Product Summary Software" shows Release 1.0
>(5740-AM6) of DF/DSS was available at that time for OS/VS1 (with later
>releases available for OS/VS2). The description says it was
Cross posting to RACF and IBMMAIN
And just when I thought the discussion had lessened, out on TECHTARGET are a
couple of articles on PCI
If you are interested, here is the link to the website. Videos, books and
articles on PCI DSS.
Note: They will ask you to join if you are not a subscriber
That is not the presentation I have.
What I have are a series of 10-15 presentations the seem to go deeper into each
subject that that presentation in the referenced document.
Each presentation is 10-20 slides.
You might want to contact Gwen directly: gde...@us.ibm.com
HTH,
snip
Is this it:
We have a customer who is exploring how to achieve PCI DSS compliance in their
z/OS environment. Their perception (I deliberately do not use the word
conviction, as they are by no means convinced of this) is that they need to
move the CDE applications to a separate Sysplex. This seems excessive
Allan Staller wrote:
There was a workshop given by Gwen Dente of IBM ATS a couple of years back.
PCI COMPLIANCE with z/OS Communications Server and System Z
It should be of immeasurable help.
Is this it: http://www.stuhenderson.com/Handouts/BWRUG_PCIStart_CS.pdf ? If so,
thanks, that's useful
Phil,
There is a RACF list that might also provide insight on PCI DSS functions.
If you have not joined, you can do so at this url
RACFhttp://www.listserv.uga.edu/archives/racf-l.html
Here are some links that might help with understanding
http://www-01.ibm.com/support/knowledgecenter
There was a workshop given by Gwen Dente of IBM ATS a couple of years back.
PCI COMPLIANCE with z/OS Communications Server and System Z
It should be of immeasurable help.
HTH,
snip
We have a customer who is exploring how to achieve PCI DSS compliance
in their z/OS environment
Of Staller, Allan
Sent: Thursday, July 23, 2015 8:21 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PCI DSS compliance question
There was a workshop given by Gwen Dente of IBM ATS a couple of years back.
PCI COMPLIANCE with z/OS Communications Server and System Z
It should be of immeasurable help.
HTH
, July 23, 2015 9:37 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PCI DSS compliance question
Another place to go and chat would be developer works for security
https://www.ibm.com/developerworks/community/forums/html/forum?id
=-0
000---1255
Lizette
Of Phil Smith
Sent: Thursday, July 23, 2015 8:48 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PCI DSS compliance question
Allan Staller wrote:
There was a workshop given by Gwen Dente of IBM ATS a couple of years
back.
PCI COMPLIANCE with z/OS Communications Server and System Z
It should
Phil Smith wrote:
... and when decommissioning hardware-no more How many DSEs should
we do? or Should we take the drives out back, shoot ‘em with a
12-gauge, and then drop ‘em in the ocean?.
Actually, there is a much more interesting corollary to this scenario. If you
have a drive that
Microwave it!
/Steve
From: Todd Arnold arno...@us.ibm.com
To: IBM-MAIN@LISTSERV.UA.EDU
Date: 2015-05-19 14:25
Subject:Re: PCI DSS compliance for z/OS
Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU
Phil Smith wrote:
... and when decommissioning
Tom Brennan wrote:
As a side note, I bought a couple Western Digital Passport drives that
connect via USB to my PC (for mailing data). I copied data to the drive
and oops, I forgot to encrypt before mailing. So I ran through the
encryption process which suprised me because it only took a
Charles Mills wrote:
I think much of the problem is with credit card numbers themselves. There are
only ~10**16 possible credit card numbers -- many fewer if you allow for the
fact that only certain combinations are valid. A credit card number is easier
to brute-force guess than its encryption
On Tue, 19 May 2015 07:25:41 -0500, Todd Arnold arno...@us.ibm.com wrote:
Phil Smith wrote:
... and when decommissioning hardware-no more How many DSEs should
we do? or Should we take the drives out back, shoot ‘em with a
12-gauge, and then drop ‘em in the ocean?.
Actually, there is a much
disguised as criteria on when notification was
required). The PCI DSS specification came out after the appearance of
the cal. state data breach notification and referenced by federal
legislation attempting to eliminate notification requirements
... because the industry was addressing the problem
On 17 May 2015 at 14:39, Phil Smith p...@voltage.com wrote:
Format-preserving data protection methods achieve PCI DSS compliance while
enabling persistent,
data-centric security. “Format-preserving” means that the encrypted/tokenized
values look and feel
like plaintext: same length, same
I think much of the problem is with credit card numbers themselves. There are
only ~10**16 possible credit card numbers...
Actually, it's much worse than that. You can't encrypt all of the PAN for a
credit card. Typically, the first part (the BIN) is required in cleartext in
order to route
Tony Harminc wrote:
I've heard about this format-preserving encryption for a while, but
haven't had the justification for spending time to really understand
what goes on. But it seems to me on the face of it that any such
encryption must be substantially weaker than what we usually think of
as
Subject: Re: PCI DSS compliance for z/OS
Charles Mills wrote:
I think much of the problem is with credit card numbers themselves. There are
only ~10**16 possible credit card numbers -- many fewer if you allow for the
fact that only certain combinations are valid. A credit card number is easier
Russell Witt wrote:
Interesting discussion. But taken another step, wouldn't the same also apply
then to encrypted physical tape? As well as encrypted virtual tape? I believe
that all physical tape encryption is done in a fashion similar; if you have
authority to the data the volume will be
Todd Arnold wrote:
The article you referenced seems to assume whole-disk encryption is always
implemented using software on your computer, since it says the operating
system has the decryption key to access the disk. That is not true, of
course, for self-encrypting disk drives (or tape drives)
Phil Smith wrote:
... and when decommissioning hardware-no more How many DSEs should
we do? or Should we take the drives out back, shoot ‘em with a
12-gauge, and then drop ‘em in the ocean?.
Now you're spoiling all the fun! But that's a really good point I never
heard before.
As a side
The article you referenced seems to assume whole-disk encryption is always
implemented using software on your computer, since it says the operating
system has the decryption key to access the disk. That is not true, of
course, for self-encrypting disk drives (or tape drives) where the
On Sun, 17 May 2015 11:39:25 -0700, Phil Smith wrote:
Warning: long post ahead, and of course it’s pushing the hammer that we sell
My eyes tend to glaze over when these threads arise, but I did at least learn
that HP had acquired Voltage ;-)
Shane ...
I *think* Phil and I and some others will be talking about PCI DSS 3.0 and the
mainframe at 4:30 on Wednesday at SHARE Orlando. Not fixed in stone yet.
I could pitch our PCI DSS hammer here also but it's a little O/T to the actual
question.
Charles
-Original Message-
From: IBM
Smith
Sent: Sunday, May 17, 2015 1:39 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: PCI DSS compliance for z/OS
Warning: long post ahead, and of course it’s pushing the hammer that we sell,
but (I believe) there are universal truths included.
Frank,
You’re asking the right questions. The basic
answers
are different—as Target, Sony, Neiman Marcus, and a host of other companies who
were PCI compliant and had passed audits can testify.
Industry opinion agrees with Peter Farley’s post: we do not believe that
disk-level encryption satisfies PCI DSS, in part because it does not meet
: PCI DSS compliance for z/OS
There has been a lot of discussion back and forth at my company as to what it
means to meet the PCI DSS (Payment Card Industry Data Security Standard)
requirement for data at rest, which I believe refers to the following from the
PCI DSS v3.0:
3.4 Render PAN
There has been a lot of discussion back and forth at my company as to what it
means to meet the PCI DSS (Payment Card Industry Data Security Standard)
requirement for data at rest, which I believe refers to the following from the
PCI DSS v3.0:
3.4 Render PAN unreadable anywhere it is stored
for PCI-DSS compliance
Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU
In
of919a62a3.59be1d57-on88257be4.00500ef8-88257be4.00510...@sce.com,
on 09/12/2013
at 07:44 AM, Skip Robinson jo.skip.robin...@sce.com said:
While the most obvious value of STP may
for PCI-DSS compliance
Sent by:IBM Mainframe Discussion List IBM-MAIN@LISTSERV.UA.EDU
In
of919a62a3.59be1d57-on88257be4.00500ef8-88257be4.00510...@sce.com,
on 09/12/2013
at 07:44 AM, Skip Robinson jo.skip.robin...@sce.com said:
While the most obvious value of STP may be synchronization
Shmuel Metz writes:
The criticism is *not* that STP has a separate charge, but rather that
the automated setting of the time *ON A SINGLE BOX* requires STP,
which is chargeable. I don't recall anybody complaining that
sub-millisecond synchronization between boxes should be free.
OK, so that's
In
of811b14da.8838eb3f-on48257be4.0035cc4f-48257be4.00386...@sg.ibm.com,
on 09/12/2013
at 06:14 PM, Timothy Sipples sipp...@sg.ibm.com said:
OK, so that's where you'd like to draw the no additional
charge/separately chargeable line.
I can see several possibilities. In order of preference:
On 09/12/2013 06:55 AM, Shmuel Metz (Seymour J.) wrote:
In
of811b14da.8838eb3f-on48257be4.0035cc4f-48257be4.00386...@sg.ibm.com,
on 09/12/2013
at 06:14 PM, Timothy Sipples sipp...@sg.ibm.com said:
OK, so that's where you'd like to draw the no additional
charge/separately chargeable
-Manager
626-302-7535 Office
323-715-0595 Mobile
jo.skip.robin...@sce.com
From: Joel C. Ewing jcew...@acm.org
To: IBM-MAIN@LISTSERV.UA.EDU,
Date: 09/12/2013 07:08 AM
Subject:Re: NTP server with System z for PCI-DSS compliance
Sent by:IBM Mainframe Discussion List IBM-MAIN
In 5231cab7.8000...@acm.org, on 09/12/2013
at 09:07 AM, Joel C. Ewing jcew...@acm.org said:
Forward-only nudging wouldn't be very useful unless the TOD clock was
also deliberately designed to always run a hair slow
Then maybe steering by slowing down every N ticks, but I'd be very
nervous
In
of919a62a3.59be1d57-on88257be4.00500ef8-88257be4.00510...@sce.com,
on 09/12/2013
at 07:44 AM, Skip Robinson jo.skip.robin...@sce.com said:
While the most obvious value of STP may be synchronization of
multiple z CECs in a glass house, it is invaluable for synchronizing
all z CECs with the
Radoslaw Skorupka writes:
Although PCI-DSS does not mention explicitly NTP, but this is the only
solution for mainframe, which in turn requires STP enablement, which
means $$$, which is quite unique among other platforms, because others
can act as NTP client for free.
No, you cannot assume
In
offafe5c57.5a2683f5-on48257be3.002c050c-48257be3.00333...@sg.ibm.com,
on 09/11/2013
at 05:17 PM, Timothy Sipples sipp...@sg.ibm.com said:
By the way, I'm rather tired of the implicit and explicit
criticisms that Server Time Protocol (STP) has a separate charge.
The criticism is *not* that
-11 11:17, Timothy Sipples pisze:
Radoslaw Skorupka writes:
Although PCI-DSS does not mention explicitly NTP, but this is the only
solution for mainframe, which in turn requires STP enablement, which
means $$$, which is quite unique among other platforms, because others
can act as NTP client
1 - 100 of 108 matches
Mail list logo
