|
This section contains examples of FDRCRYPT and FDRCAMS to illustrate how easy
they are to use.
This example shows FDRCRYPT being used during an FDRINC
Full-volume backup, where all volumes with volsers beginning with TEST will be backed up. Two copies of the backups
will be created - COPY1 will not be encrypted and will stay onsite, COPY2 will be encrypted.
The default CIPHER encryption will be used to reduce CPU (and elapsed time) requirements
of the encryption. The optional FDRCRYPT DD has been used to specify that a master key
will be used for all the encrypted backups created by this job. The value of this
master key will be obtained from the RACF security profile facility FDRCRYPT.ABRBKUP,
as directed by the MASTERKEYID keyword.
//BACKUP EXEC PGM=FDRABR,REGION=0M
//SYSPRINT DD SYSOUT=*
//TAPE1 DD UNIT=(TAPE,2),DISP=(,KEEP),VOL=(,,,255),DSN=ABR1
//TAPE11 DD UNIT=(TAPE,2),DISP=(,KEEP),VOL=(,,,255),DSN=ABR11
//SYSIN DD *
DUMP TYPE=FDR,ENCRYPT=COPY2,ENCRYPTYPE=CYPHER
MOUNT VOLG=TEST
//FDRCRYPT DD *
ENCRYPT MASTERKEYID=ABRBKUP |
FDRCAMS encryption uses standard IDCAMS JCL, with two minor alterations:
- The PGM= is altered to PGM=FDRCAMS
- An additional FDRCRYPT DD statement is added to contain the FDRCRYPT control statements.
All IDCAMS functions are accepted when executing FDRCAMS. When a REPRO function is invoked, FDRCAMS uses IDCAMS REPRO I/O exits to optionally:
- Encrypt sequential output files from a REPRO function
- Decrypt sequential input files to a REPRO function
The input file for an encryption, or the output file of a decryption, can be anything supported by
REPRO, including sequential data sets, VSAM clusters (keyed and non-keyed), and
IAM files.
FDRCAMS can REPRO from any supported file type to an encrypted sequential data set,
and can REPRO from an encrypted sequential data set to any supported file type.
Operands on the ENCRYPT or DECRYPT statements in the FDRCRYPT DD input will specify
which REPRO functions in the step will invoke encryption or decryption, based on the input or
output DD name of the REPRO, or the input or output file name of the REPRO.
In the example below, we are executing FDRCAMS to do a REPRO of a VSAM KSDS out
to a sequential file on tape. The data on the sequential output is
encrypted with CIPHER encryption.
//REPRO EXEC PGM=FDRCAMS,REGION=0M
//SYSPRINT DD SYSOUT=*
//OUTTAPE DD UNIT=CART,DSN=MASTER.FILE(+1),DISP=(,CATLG),EXPDT=99000
//SYSIN DD *
REPRO OUTFILE(OUTTAPE) INDATASET(FINANCE.MASTER.FILE)
//FDRCRYPT DD *
ENCRYPT OUTFILE=OUTTAPE,ENCRYPTTYPE=CIPHER |
 return to top
|
|
|
| Can we HELP you... |
|
Looking for more information?
|
Visit us at:
IBM System z
TECHNICAL UNIVERSITY
2010
October 4-8, 2010
Boston, MA
Booth#: 20
|
