Skip to Content

FDRCRYPT Tape Copy Examples

All examples in this section are found in the JCL library installed with FDR. The member names are EX7122x.

The FDR tape copy utilities FDRTCOPY and FDRTSEL, described in FDR-and-ABR-Backup-Maintenance, can be used to copy encrypted tapes or to create an encrypted backup from an unencrypted backup, or vice versa.

COPY FDR or DSF backup example

Copy an encrypted FDR or DSF backup data set. By default, the output is encrypted with the same algorithm and keys. In this example, the name of the Encryption Keyfile in which the input backup was recorded and in which the output backup is recorded is specified. If the Encryption Keyfile is named in the FDR Global Options, the FDRCRYPT statement can be omitted.

//FDRTCOPY EXEC PGM=FDRTCOPY,REGION=0M //SYSPRINT DD SYSOUT=* //SYSUDUMP DD SYSOUT=* //TAPEIN DD DSN=FDR.BACKUP,DISP=OLD //TAPEOUT DD DSN=FDR.COPY,UNIT=TAPE,DISP=(NEW,KEEP) //SYSIN DD * COPY /* //FDRCRYPT DD * KEYFILE DSN=FDRCRYPT.KEYFILE /*

ENCRYPT FDR or DSF backup example

Copy an unencrypted FDR or DSF backup data set and encrypt the output with AES-128. A master key is used (taken from the profile FACILITY/FDRCRYPT.FDR1) and the AES key is generated by FDRCRYPT.

//FDRTCOPY EXEC PGM=FDRTCOPY,REGION=0M //SYSPRINT DD SYSOUT=* //SYSUDUMP DD SYSOUT=* //TAPEIN DD DSN=FDR.BACKUP,DISP=OLD //TAPEOUT DD DSN=FDR.COPY,UNIT=TAPE,DISP=(NEW,KEEP) //SYSIN DD * COPY ENCRYPT=ALL,ENCRYPTTYPE=AES /* //FDRCRYPT DD * KEYFILE DSN=FDRCRYPT.KEYFILE ENCRYPT MASTERKEYID=FDR1 /*

Encrypt ABR COPY2 example

If you create only COPY 1 backups with ABR (to reduce your run time or your tape drive requirements), you can use FDRTSEL to create an encrypted second backup asynchronously once the backups complete. AES128 encryption is to be used, except that DB2 volumes use AES256 encryption.

//FDRTSEL EXEC PGM=FDRTSEL,REGION=0M //SYSPRINT DD SYSOUT=* //SYSUDUMP DD SYSOUT=* //TAPEOUT DD DISP=(,KEEP),DSN=DUMMY1,UNIT=CART //SYSIN DD * COPY ENCRYPT=ALL,ENCRYPTTYPE=AES128 SELECT CATLG,SOURCE=1,IFNOCOPY=2,CYCLES=14 /* //FDRCRYPT DD * ENCRYPT MASTERKEYID=OFFSITE ENCRYPT VOL=DB2*,ENCRYPTTYPE=AES256 /*

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC Compuware FDR 5.04