Support for IBM z Systems Pervasive Encryption (zSPE) (PTF BQQ3683 applied)
The Change Accumulation, Image Copy, and Recovery utilities of the BMC AMI Backup and Recovery for IMS support IBM z Systems Pervasive Encryption (zSPE) in the form of data set–level encryption.
These utilities can read and write the following databases or data sets:
- z/OS encrypted IMS VSAM databases
- (PTF BQQ4881 applied) z/OS encrypted IMS OSAM databases
- Image copy data sets
- Change accumulation data sets
- IMS log data sets
- Recon data sets
The Change Accumulation utility can produce encrypted-output change accumulation and image copy data sets. To request this output, you use a new keyword, DSKEYLBL, in the model control statement or the ISPF dynamic allocation model panel. DSKEYLBL specifies a label that the system should use to encrypt the new output data set, using the associated dynamic allocation model.
The following example creates the output change accumulation data set for the CAGRP CAGRPT01 by using the model definition DASDCA, in encrypted format:
UNIT(SYSDA) SPACE(C,20,15) DSKEYLBL(ENCRYPDS.KEYLBL)
GROUP CAGRP(CAGRPT01) FUNC(CA) CA((*,DASDCA)) SORT(SRT1)
You can also use the ICDSKEYL and CADSKEYL keywords to request encryption:
- Use ICDSKEYL to request encrypted-output image copy data sets.
- Use CADSKEYL to request encrypted change accumulation data sets.
You can specify ICDSKEYL and CADSKEYL keywords in either the global option module or the GLBL control statement.
The following example creates the output change accumulation data set for the CAGRP CAGRPT01 by using the dynamic allocation parameters, in encrypted format:
CAALLOC(Y) -
ICUNIT(SYSDA) CASPACE(CYL,2,1) -
CAPREF(CAP.R15.CA1.CAGRPT01) -
CADSKEYL(ENCRYPDS.KEYLBL) CASTORCL(DEVSMS)
Related topic