Lucy, We are just getting started on this also. We use CA's Tape Encryption product. Toy should have feature code 3863 CPACF that will handle AES128 and some SHA-1 stuff via macros or you can codes the five or some commands into a API.
I've found several documents on the IBM page and receive some benchmark numbers from CA. Remember without a ZIIP the overhead is real. CA also has a VTAPE version of the Tape encryption product. Kevin -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Lucy Arnold Sent: Friday, October 03, 2008 5:45 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Crypto HELP. Hello all! I have a Z9 BC with no extra crypto processors. (ZOS 1.7) We are in the process of installing ICSF so we can encrypt tapes that go offsite (CA:DISK and CA:VTAPE tapes) Does anyone have any nuggets of wisdom on how to do this??? I have all the manuals printed but can't seem to find the ISMF panel that I need. Most of the panels seem to suggest you need additional processors to use them. One manual suggests it's a completely batch operation. There is a SYSPROG guide with a plethera of Assembler exits - perhaps they are how the encrypt/decrypt gets called??? My brain has turned to green slime and is coming out of my ear - ANY help would be appreciated. :) Thanks in advance! Lucy Arnold Storage Manager U.C. Davis Medical Center 916-734-5498 ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html This e-mail message and any attachments transmitted with it are confidential and are intended solely for the use of its authorized recipient(s). If you are not an intended or authorized recipient, you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the information contained in this e-mail is prohibited. If you have received this message in error or are not authorized to receive it, please immediately notify the sender and delete the original message and all copies of it from your computer. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
