KEYFILE Statement

KEYFILE statement

The optional KEYFILE statement specifies the data set name (and optionally the volume serial) of the Encryption Keyfile to be used by this backup or restore. The default is a cataloged Encryption Keyfile name specified in the FDR Global Options (option KEYFILE). If present, code this statement as the first statement in the FDRCRYPT input.

KEYFILE statement syntax

We recommend that the common (default) Encryption Keyfile named in the option table be used for all backups and restores unless you have a need to store keys for certain backups separately.

KEYFILE statement required operands

DSN=

dsn

The fully-qualified data set name of the Encryption Keyfile to be used by this backup or restore (up to 44 characters). If VOL= is not specified on the KEYFILE statement, this data set must be cataloged.

For restores, DSN=NULLFILE can be specified, in which case FDRCRYPT does not attempt to access any Encryption Keyfile. In this case, the required encryption keys or master keys must be specified on DECRYPT statements. If DSN=NULLFILE is omitted, the Encryption Keyfile specified in the FDR Global Options is allocated and opened, even if it is not needed; if it cannot be located, an error occurs.

Default: The default is obtained from the FDR Global Options (see FDRCRYPT-Key-Management).

KEYFILE statement optional operands

VOL=

vol

The volume serial number of the Encryption Keyfile named by DSN=, if it is not cataloged.

Default: The volume serial number is obtained from the system catalog.