Hello dear experts.
I have a customer who is considering using HSM (never used HSM before).
We are trying to understand if when using TAPESECURITY(RACF) option of HSM
We also have to add manually each HSM VOLSER into the RACF TAPEVOL HSMABR
profile.
We are getting mixed and confusing messages
er
> Sent: Wednesday, November 27, 2013 8:05 AM
> To: IBM-MAIN@LISTSERV.UA.EDU
> Subject: DFSMSHSM TAPESECURITY(RACF)
>
> Hello dear experts.
>
> I have a customer who is considering using HSM (never used HSM before).
>
> We are trying to understand if when using TAPESECURI
CA-1 handles the expiration issues.
:>: -Original Message-
:>: From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On
:>: Behalf Of Arye Shemer
:>: Sent: Wednesday, November 27, 2013 7:05 AM
:>: To: IBM-MAIN@LISTSERV.UA.EDU
:>: Subject: DFSMSHSM TAPESECURITY(R
:>: -Original Message-
> :>: From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU]
> On
> :>: Behalf Of Arye Shemer
> :>: Sent: Wednesday, November 27, 2013 7:05 AM
> :>: To: IBM-MAIN@LISTSERV.UA.EDU
> :>: Subject: DFSMSHSM TAPESECURITY(RACF)
> :
Arye Shemer wrote:
>He intial request was to take the strictest security method HSM provide
> (TAPESECURITY(RACF)).
What we're using:
SETSYS NORACFIND
SETSYS TAPESECURITY(RACF)
SETSYS NOERASEONSCRATCH
SETSYS NOPROFILEBACKUP
These settings are practical for us with good security. YMMV.
>Af
Thank you Elardus,
Yes, i meant Control-T.
We are using physical cartridges no VTS.
Thanks for your suggestions and for sharing your settings.
Best regards,
Arye Shemer
On 28 November 2013 08:07, Elardus Engelbrecht <
elardus.engelbre...@sita.co.za> wrote:
> Arye Shemer wrote:
>
> >He intia
Arye,
In general, if you value the data that hsm has placed on tape, you should
ensure that the data is protected. This means there has to be some RACF profile
(or equivalent) protecting the volume or the data, and the system (or some
other involved party) has to make the RACROUTE call to chec
