Fujitsu BS2OSD manual Reorganizing open files, Tape blocks 32 KB, File encryption

Page 13

2.8Reorganizing open files

Previously, it was only possible to reorganize closed files in pubsets or volumes with SPACEOPT.

As of SPACEOPT V3.0, open files can also be included when reor- ganizing pubsets and reducing file extents.

Please consult the Release Notice SYSFGM.SPACEOPT.030.E for the complete scope of the innovations.

2.9Tape blocks > 32 KB

Block sizes ranging from 32 KB to 256 KB are supported for tape I/O with the BTAM access method for record formats V and U, to allow high-performance backups to be made.

The new block size is specified at the TPR-FCB program interface. The function is only available in TPR and for users with the TSOS

*1 or HSMS-ADMINISTRATION privilege.

Large tape blocks are supported by the products ARCHIVE V7.0B, FDDRL V15.0 and PERCON V2.8

2.10 File encryption

Data encryption fulfills the requirements for the security of critical data, such as protection against physical reading from the disk, protection against unauthorized reading, also with TSOS special rights, protection against unauthorized usage of backup tapes or monitoring the data contents with file transfer connec- tions.

The files are stored on the disk in encrypted form and decrypted in blocks for an authorized access in the system/server. The files are taken over encrypted into backups or during file trans- fers.

Two special commands have been introduced for encrypting and de- crypting a file. An eight character crypto password is defined for each file that is to be encrypted/decrypted. The key for en- cryption/decryption is then derived from this during access.

ENCRYPT-FILE: converts a normal file into an encrypted file

DECRYPT-FILE: converts an encrypted file into a normal file

Working with encrypted files and the crypto password is similar to working with ID-protected files and the file password. The crypto password is registered as an access right with the command ADD-CRYPTO-PASSWORD. This registration is valid for the current task. The access right can be removed again with the command

REMOVE-CRYPTO-PASSWORD.

*1 The openCrypt-Serv 1.2 subsystem with a corresponding Crypto Box

*1 is required for file encryption on S servers.

*1 openCRYPT-SOFT 1.2 in conjunction with X2000 as of V3.0A are

*1 required for encryption on the SX100-C and SX150 servers.

*1 An additional crypto CPU is required on SX150, whereas the

*1 encryption processes run on the X2000 CPU on SX100-C

Page 12

Image 13
Contents BS2OSDBS2000/OSD Software extensions GeneralTechnical information Hardware support BS2GA.CRTE-BAS V6.0, BS2GA.DSSM BS2GA.APACHEBS2GA.LLMAM BS2GA.POSIXDelivery OrderingBS2CP Pamint PasswordBS2000-EXEC Builder TPR-LZS CalendarSMPGEN-U SMPGEN-SSpccntrl StatusSled DocumentationStrt BS2GA.WTOSD WEBTRANS-OSDMsgmaker V1.2A Title Order Number German English AdamPosix Posix SOCKETS/XTISYSRME.IORM.060.E SYSRME.ASTI.010.E SYRME.BS2CP.150.ESYSRME.NKISAM.150.E SYSRME.SPCCNTRL.150.EData spaces Adaptations to CfcsNumber of Mrscat entries Functional extensions for SM pubsetsFaster failure detection in Mscf Reorganizing open files REMOVE-CRYPTO-PASSWORDTape blocks 32 KB File encryptionIncreasing the size of volumes disk resizing Four character mnemonic name for tape devices Catalog administrationNew functions on SX 150 business servers New functions in BS2000/OSD V6.0B$TSOS.TSOSCAT.#J00 $TSOS.TSOSCAT.#J99 $TSOS.TSOSCAT.#M00 $TSOS.TSOSCAT.#M99$TSOS.TSOSCAT.#P00 $TSOS.TSOSCAT.#P99 IMPORT-PUBSET…. EXTRA-LARGE-CAT-CONV=*YESPerformance improvements in BS2000/OSD V6.0B Self-configuring NK-ISAM Pools in Data SpacesNew sub-system Status Jenv Correction Package 2/2006 New functions in BS2000/OSD V6.0B withAutonomous, dynamic control of I/O resources Iorm Page Support for conversion from 7 bit to 8 bit character set MODIFY-TERMINAL-OPTIONS CODED-CHARACTER-SET=*8BIT-DEFAULTSYSRME.ASTI.010.E New Asti SubsystemSupport for Unicode in BS2000/OSD via XHCS-SYS Support for Unicode by the software products SHOW-SAN-CONFIGURATION ServiceImproved SAN support Sancheck function New functions in Posix A39New system diagnostic tool Auxiliary Serslog Extensions ASE Extensions in Software products Support for new HardwareACS Alias Catalog System for job variables Implemented change requests / extended commandsRANGE=*FILE RANGE=*JV20.4 NTP/BS2 TimeServer with highest priority Introduction of a default account numberIncrease in the maximum paging area size Advanced support of large SM PubsetsExtended Status information Catalog expansion commandsResource requirements Extended commands for setting CCS defaultsCREATE-FILE / CREATE-FILE-GROUP MODIFY-FILE-ATTRIBUTES / MODIFY-FILE-GROUP-ATTRIBUTESSoftware configuration Product installation Page Product use Msgmaker Frefcryp FilecrypNtpshigh JtshmemJtabsmem Ccpunorm DelloglnDmcmaxp Page Obsolete functions and those to be dis Obsolete commandsIncompatibilities to BS2000/OSD-BC V5.0C Obsolete macrosRestrictions Procedure in the event of errorsUserdump Snapfile SystemdumpSystemrepfile Sjmsfile SYSTEM-JOBPOOLHersfile Changed support Central unitsChannels FC switchesDis support Extended supportMagnetic tape devices Disk controllersDMX-3 DMX-4Other peripherals PrintersAtop