Key data set contents

Some content is unavailable due to permissions.

ignores any characters in columns 72 through 80. Each row contains:

• One encryption key
• A corresponding timestamp
• An optional encryption algorithm identifier
• An optional comment

These fields are separated by one or more blank characters. The first character of the comment is an asterisk. Rows are ordered in the data set by timestamp with the most recent timestamp first. The current key is the key in the first row. The format of the key data set row is:

An example of the contents of a key data set follows:

Some content is unavailable due to permissions.

uses the contents of the key data set to determine a key value for encryption or decryption of image copies. The

Some content is unavailable due to permissions.

COPY commands such as COPY TABLESPACE and COPY INDEXSPACE use the current key or the key in the first row of the key data set to encrypt image copies. If the timestamp in the first row is in the future,

Some content is unavailable due to permissions.

sets the condition code to 4, issues a warning message, and creates plaintext image copies.

Encrypted image copies are registered in BMCXCOPY. As with SYSCOPY registration, BMCXCOPY registration includes a timestamp specifying when the copy was registered. The

Some content is unavailable due to permissions.

COPY IMAGECOPY command, as well as

Some content is unavailable due to permissions.

and Log Master, use this timestamp to find the correct key value in the key data set. For more information about the registration of encrypted copies, see Registration-for-plaintext-image-copies.

For example, if

Some content is unavailable due to permissions.

selected an image copy for a recovery from BMCXCOPY with a timestamp of 2009-02-12-10.00, the encryption key and DES algorithm in the third row in the example key data set above is selected.

This section contains the following topics: