The files are encrypted in pages with the symmetrical DES or AES encryption method. The encryption method can be selected via the FILECRYPT system parameter and can be changed dynamically. AES is used by default.
The FREFCRYP system parameter can be used to limit the number of crypto passwords by only allowing new crypto passwords to be as- signed for files of a specific ID. Only the crypto passwords of reference files from this specific ID can be selected for files on other IDs.
Restrictions: | Files on private disks, EAM files, tape files, |
| job variables and |
*1 | files on the home pubset under the TSOS ID |
*1 | cannot be encrypted. |
Recommendations: - Connection of two Crypto Boxes, each with two paths
-Read buffering with DAB
-Only encryption of selected files, not complete pubsets.
Important notes:
1.If the crypto password is lost, there is no way of recon- structing the file via decryption, even with measures em- ployed by the privileged system administrator or by FSC. In other words, organizational precautions must be taken for such a case, e.g. storing the crypto password in a safe place (key escrowing).
2.In HIPLEX configurations it must be ensured that the standby system of an application that is to be moved and has encrypted files, has the necessary resources available, e.g. an S server with a Crypto Box.
3.In Symmetrix disaster protection configurations with SRDF mirroring, the encrypted files are also available on the mirrors, i.e. the encryption is transparent for the known
2.11Increasing the size of volumes (disk resizing)
In SPACEOPT V3.0, a new function is provided for adapting the size of public disks.
The command
With this migration, the source disk and the destination disk must be the same size. If the LUN is larger than the source disk, unusable space is left at the end of the disk that can be made available with the new function.
Disk size increasing can only be used for public disks with D3435 format on Symmetrix and FibreCat.
Please consult the Release Notice SYSFGM.SPACEOPT.030.E for de- tailed information on the functional scope.
Page 13