Marilyn Allmond/Gaithersburg/IBM is on vacation.

I will be out of the office starting 02/12/2009 and will not return until 02/23/2009. Please search ATS Techdocs website for information related to crypto FIRST - www.ibm.com/support/techdocs Use keyword search of "crypto" before requesting further assistance. I will not check email and phone

Re: EKM on Z/os & Drive on iSeries

Is aes0001 an alias associated with the tape drive, key group, key alias list, or range of key aliases? And, yes, the 4145530001 is ASCII for aes0001. This is associated with the data key and serves as the Data Key identifier which is written to tape with the encrypted data. In thi

Re: TLS Cipher suites

Hal, you can find the TLS Cipher Suites easily with Goggle search or by going directly to www.ietf.org and looking at the security working group. The V1.2 TLS RFC5246 documents the cipher suites as shown below but remember that products may or may not support some of these suites but not all. h

Marilyn Allmond/Gaithersburg/IBM is on vacation.

I will be out of the office starting 12/18/2008 and will not return until 01/02/2009. I am out on vacation returning after New Year's. Please search ATS Techdocs website for information related to crypto FIRST - www.ibm.com/support/techdocs Use keyword search of "crypto" before requesting fur

Re: Z/890 Master Key

I am assuming ICF is really ICSF with the IBM mainframe crypto hardware. There is no way to revert to the previous master key. However, if the previous master key is still stored within the crypto hardware and you have an externally (not in CKDS) stored key token whose key value was encrypted