Re: End of Support for Encryption Key Manager (EKM)
Same experience here Dave. We licensed SKLM 5698-B35 SKLM for z/OS 5698-B42 SKLM for Storage to replace EKM and the migration is trivial. I have not seen any communication from IBM on EOS for EKM. The lack of clear communication providing an EOS date or a statement of direction has been confounding. IBM representatives have spread a lot of FUD regarding the need to migrate off EKM over the last several years but despite several appeals to IBM'ers to clarify the position nothing useful. SKLM is functionally and structurally almost identical to EKM providing additional device support (E07 native tape transports, full disk encryption on DS8xxx) and of course it is a chargeable product. Best Regards, Sam Knutson, GEICO System z Team Leader mailto:sknut...@geico.com (office) 301.986.3574 (cell) 301.996.1318 Think big, act bold, start simple, grow fast... -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Jousma, David Sent: Monday, April 09, 2012 9:10 AM To: IBM-MAIN@bama.ua.edu Subject: Re: End of Support for Encryption Key Manager (EKM) I don't know about the EOS on EKM, nor am I aware of the cost of ISKLM Lite, but I will tell you that it is plug-to-plug compatible with EKM making the conversion pretty easy. Biggest change was changing the startup JCL, and other parameters that changed the letters EKM to ISKLM. My company went ahead and licensed the new version. EKM/ISKLM has been very stable, with no problems ever at my site, BUT if it broke and we were unable to read/write our encrypted tapes the cost of that outage would negate any savings from not upgrading to a supported version. Does it stink that IBM now charges for something that was free? You-betcha. I guess you have 3 options: 1) Negotiate a better price from IBM and get on a supported version, 2) start converting your encrypted tapes to non-encrypted, and discontinue the use of the software, Or 3) continue on unsupported software, but get that letter from your CIO as your get-out-of-jail free card if the worst ever happens. _ Dave Jousma Assistant Vice President, Mainframe Services david.jou...@53.com 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f 616.653.2717 This email/fax message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this email/fax is prohibited. If you are not the intended recipient, please destroy all paper and electronic copies of the original message. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: End of Support for Encryption Key Manager (EKM)
I don't know about the EOS on EKM, nor am I aware of the cost of ISKLM Lite, but I will tell you that it is plug-to-plug compatible with EKM making the conversion pretty easy. Biggest change was changing the startup JCL, and other parameters that changed the letters EKM to ISKLM. My company went ahead and licensed the new version. EKM/ISKLM has been very stable, with no problems ever at my site, BUT if it broke and we were unable to read/write our encrypted tapes the cost of that outage would negate any savings from not upgrading to a supported version. Does it stink that IBM now charges for something that was free? You-betcha. I guess you have 3 options: 1) Negotiate a better price from IBM and get on a supported version, 2) start converting your encrypted tapes to non-encrypted, and discontinue the use of the software, Or 3) continue on unsupported software, but get that letter from your CIO as your get-out-of-jail free card if the worst ever happens. _ Dave Jousma Assistant Vice President, Mainframe Services david.jou...@53.com 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f 616.653.2717 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Mark Jacobs Sent: Friday, April 06, 2012 11:20 AM To: IBM-MAIN@bama.ua.edu Subject: Re: End of Support for Encryption Key Manager (EKM) I know all that, but we were floored by the statement made by IBM on the call yesterday. I'm trying to get it confirmed. Mark Jacobs This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: End of Support for Encryption Key Manager (EKM)
I don't disagree with you, but we're still waiting for official confirmation from IBM on the EOS. If they do confirm it we're going to be royally PO'ed since it'll mess up our budget planning. Mark Jacobs On 04/09/12 09:09, Jousma, David wrote: I don't know about the EOS on EKM, nor am I aware of the cost of ISKLM Lite, but I will tell you that it is plug-to-plug compatible with EKM making the conversion pretty easy. Biggest change was changing the startup JCL, and other parameters that changed the letters EKM to ISKLM. My company went ahead and licensed the new version. EKM/ISKLM has been very stable, with no problems ever at my site, BUT if it broke and we were unable to read/write our encrypted tapes the cost of that outage would negate any savings from not upgrading to a supported version. Does it stink that IBM now charges for something that was free? You-betcha. I guess you have 3 options: 1) Negotiate a better price from IBM and get on a supported version, 2) start converting your encrypted tapes to non-encrypted, and discontinue the use of the software, Or 3) continue on unsupported software, but get that letter from your CIO as your get-out-of-jail free card if the worst ever happens. _ Dave Jousma Assistant Vice President, Mainframe Services david.jou...@53.com 1830 East Paris, Grand Rapids, MI 49546 MD RSCB2H p 616.653.8429 f 616.653.2717 -Original Message- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Mark Jacobs Sent: Friday, April 06, 2012 11:20 AM To: IBM-MAIN@bama.ua.edu Subject: Re: End of Support for Encryption Key Manager (EKM) I know all that, but we were floored by the statement made by IBM on the call yesterday. I'm trying to get it confirmed. Mark Jacobs This e-mail transmission contains information that is confidential and may be privileged. It is intended only for the addressee(s) named above. If you receive this e-mail in error, please do not read, copy or disseminate it in any manner. If you are not the intended recipient, any disclosure, copying, distribution or use of the contents of this information is prohibited. Please reply to the message immediately by informing the sender that the message was misdirected. After replying, please erase it from your computer system. Your assistance in correcting this error is appreciated. -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- Mark Jacobs Time Customer Service Tampa, FL Learn from yesterday, live for today, hope for tomorrow. The important thing is to not stop questioning. - Albert Einstein -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: End of Support for Encryption Key Manager (EKM)
I know that Java 6.0 was the last to have EKM in it. J6.0.1 does not. AFAIK J5.0 still ships with it. -- This email message and any accompanying materials may contain proprietary, privileged and confidential information of CIT Group Inc. or its subsidiaries or affiliates (collectively, CIT), and are intended solely for the recipient(s) named above. If you are not the intended recipient of this communication, any use, disclosure, printing, copying or distribution, or reliance on the contents, of this communication is strictly prohibited. CIT disclaims any liability for the review, retransmission, dissemination or other use of, or the taking of any action in reliance upon, this communication by persons other than the intended recipient(s). If you have received this communication in error, please reply to the sender advising of the error in transmission, and immediately delete and destroy the communication and any accompanying materials. To the extent permitted by applicable law, CIT and others may inspect, review, monitor, analyze, copy, record and retain any communications sen! t from or received at this email address. -- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Mark Jacobs Sent: Friday, April 06, 2012 10:09 AM To: IBM-MAIN@bama.ua.edu Subject: [IBM-MAIN] End of Support for Encryption Key Manager (EKM) I was on a conference call with an IBM storage specialist yesterday and he mentioned that end of support for EKM is April 2012. I've never seen this statement from IBM, or heard anything about it until that conference call. Can anyone confirm? -- Mark Jacobs Time Customer Service Tampa, FL Learn from yesterday, live for today, hope for tomorrow. The important thing is to not stop questioning. - Albert Einstein -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: End of Support for Encryption Key Manager (EKM)
I know all that, but we were floored by the statement made by IBM on the call yesterday. I'm trying to get it confirmed. Mark Jacobs On 04/06/12 10:28, Ken Porowski wrote: I know that Java 6.0 was the last to have EKM in it. J6.0.1 does not. AFAIK J5.0 still ships with it. -- This email message and any accompanying materials may contain proprietary, privileged and confidential information of CIT Group Inc. or its subsidiaries or affiliates (collectively, CIT), and are intended solely for the recipient(s) named above. If you are not the intended recipient of this communication, any use, disclosure, printing, copying or distribution, or reliance on the contents, of this communication is strictly prohibited. CIT disclaims any liability for the review, retransmission, dissemination or other use of, or the taking of any action in reliance upon, this communication by persons other than the intended recipient(s). If you have received this communication in error, please reply to the sender advising of the error in transmission, and immediately delete and destroy the communication and any accompanying materials. To the extent permitted by applicable law, CIT and others may inspect, review, monitor, analyze, copy, record and retain any communications s! en! t from or received at this email address. -- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@bama.ua.edu] On Behalf Of Mark Jacobs Sent: Friday, April 06, 2012 10:09 AM To: IBM-MAIN@bama.ua.edu Subject: [IBM-MAIN] End of Support for Encryption Key Manager (EKM) I was on a conference call with an IBM storage specialist yesterday and he mentioned that end of support for EKM is April 2012. I've never seen this statement from IBM, or heard anything about it until that conference call. Can anyone confirm? -- Mark Jacobs Time Customer Service Tampa, FL Learn from yesterday, live for today, hope for tomorrow. The important thing is to not stop questioning. - Albert Einstein -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN -- Mark Jacobs Time Customer Service Tampa, FL Learn from yesterday, live for today, hope for tomorrow. The important thing is to not stop questioning. - Albert Einstein -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
Re: End of Support for Encryption Key Manager (EKM)
I know all that, but we were floored by the statement made by IBM on the call yesterday. I'm trying to get it confirmed. Mark Jacobs I was on a conference call with an IBM storage specialist yesterday and he mentioned that end of support for EKM is April 2012. I've never seen this statement from IBM, or heard anything about it until that conference call. Can anyone confirm? -- Mark Jacobs Time Customer Service Tampa, FL Mark, I think that IBM is being obtuse on this issue. We hear just bits and pieces and slowly see the process going away. I have no confirmation of EOS. However, from this list I know that any JAVA from 1.6.0.1 and above EKM is gone. If you hold onto the JAVA 1.6.0 or 1.5 then you can continue to run EKM. I have not seen or heard any specific details that EKM is no longer supported. I think they still do it if pushed. I agree that IBM should be upfront and say what their intent is, rather than making the user community fret. Lizette -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: INFO IBM-MAIN
