And how do you change the encryption key for each tape drive? Talk to z/OS
keymanager? Don't change keys? 

/Tom Kern

--- Alan Altmark <[EMAIL PROTECTED]> wrote:

> On Tuesday, 06/12/2007 at 04:11 MST, Thomas Kern <[EMAIL PROTECTED]> 
> wrote:
> 
> > The hardware solution of encrypted tape drives is pushed alot because 
> z/OS has
> > so much data that should be encrypted and z/VM can use them too, but not 
> as
> > friendly as if you were strictly z/OS. 
> 
> Huh?  Using an encrypting tape drive on z/VM is as easy as specifying the 
> key label on ATTACH.
> 
> > What I haven't figured out about them is
> > how to prove to the security auditors that the data is REALLY encrypted.
> 
> Quoting some news articles on the web, IBM is in the process of having the 
> TS1120 FIPS 140-2 certified.
> 
> Alan Altmark
> z/VM Development
> IBM Endicott
> 



 
____________________________________________________________________________________
Food fight? Enjoy some healthy debate 
in the Yahoo! Answers Food & Drink Q&A.
http://answers.yahoo.com/dir/?link=list&sid=396545367

Reply via email to