> -----Original Message----- > From: IBM Mainframe Discussion List > [mailto:ibm-m...@bama.ua.edu] On Behalf Of Marilyn Allmond > Sent: Thursday, January 29, 2009 5:27 PM > To: IBM-MAIN@bama.ua.edu > Subject: Re: EKM on Z/os & Drive on iSeries > > Is aes000....1 an alias associated with the tape drive, key > group, key alias list, or range of key aliases?
Hi Marilyn, I think so. This is an LTO4 drive in a TS3100 library, so I'm manually creating symmetric DESede keys for this device/library. I don't have any key groups set up. I also have acceptUnknownDrives = true. > And, yes, > the 414553000....1 is ASCII for aes000....1. This is > associated with the data key and serves as the Data Key > identifier which is written to tape with the encrypted data. > In this manner the key value should be retrieved from the key > store. Of course the DKi must be identifible to the keystore. > So, if the keystore is on z/OS the DKi needs to be in EBCDIC > to be located within the keystore. Yup, I think you're right. Either the library is sending it incorrectly in ascii, or EKM on the MF is not translating it correctly. I'm currently upgrading from Java 1.4.2 (sr10) to Java 1.6.0 (sr3) - with associated EKM software at the direction of IBM Java Level 2 (and 3!). Thanks for the response. BobL ------------------------------------------------------------------------------ This e-mail transmission may contain information that is proprietary, privileged and/or confidential and is intended exclusively for the person(s) to whom it is addressed. Any use, copying, retention or disclosure by any person other than the intended recipient or the intended recipient's designees is strictly prohibited. If you are not the intended recipient or their designee, please notify the sender immediately by return e-mail and delete all copies. OppenheimerFunds may, at its sole discretion, monitor, review, retain and/or disclose the content of all email communications. ============================================================================== ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html