We do DB2 row encrypt/decrypt using the ICSF CSNBENC and CSNBDEC service. We did this a couple of years ago, but we tested the various ICSF services and the KMC assembler instruction. We found the CSNBENC service worked the quickest when setup to utilize the CPACF hardware function and not actually use the crypto cards. We use the DB2 editproc to call the encryption/decryption program. If you want a copy of the assembler program I can send it to you offline.
Brad Wissink Information Technology Services Iowa State University 515-294-3088 -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Lizette Koehler Sent: Friday, July 23, 2010 10:18 AM To: [email protected] Subject: ICSF, Crypto Cards and DB2 I have been asked to research the use of ICSF in DB2. I know that ICSF comes with z/OS. However, I am not sure if it really requires a Crypto card to run. Q1: Can you run ICSF without a Crypto Card? Second, the intent is to encrypt row(s) of DB2 Data. Is ICSF the best way to go or are there other options? I will probably switch over to the DB2-L Group on this, but wanted to know about the basic ICSF and Crypto Card issue first. Thanks Lizette ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
