Previous Topic: How In-House Keys Work

Next Topic: Encryption Algorithm Strength

Specify a Symmetric Key

Edit parmlib to specify the appropriate parameters to use when encrypting an in-house tape with a symmetric key.

To specify a symmetric key

  1. Specify a name for a new key section in the Key= attribute in the SymmetricKey section.

    A new key section name is specified in the SymmetricKey section.

  2. Start a new section after the SymmetricKey section using the specified key section name.

    A new key section is started.

  3. Specify the attributes for Algorithm=, Regenerate=, and NumberOfGenerations= in the key section, as needed.

    The attributes that define a symmetric key are defined and the key is specified.

Example: Specify Symmetric Key

The following example shows the use of the SymmetricKey section and the key section. In the SymmetricKey section, a key section named hrkey is specified. This customized key section name is then used to specify the attributes of the key. In this example, the hrkey section specifies that the key named hrkey uses the AES256 encryption algorithm, that a new key is generated monthly, and that 12 keys are generated in advance for future use.

<SymmetricKey>
Key=hrkey

<hrkey>
Algorithm=aes256
Regenerate=monthly
NumberOfGenerations=12