Defining Keys in Parmlib › Keys for Business Partners › Generate a Key for B2B Tapes Using Digital Certificates

Previous Topic: MOD Processing

Next Topic: Generate a Key for B2B Tapes Using a Code Book

Generate a Key for B2B Tapes Using Digital Certificates

Specify the appropriate attributes in parmlib to generate a key for B2B tapes using digital certificates.

To generate a key for B2B tapes using digital certificates

  1. In the B2BKeyrings section, specify the ShareRingAlias for the key ring of the business partner.

    The customizable section name to use for specifying the attributes of the key is specified.

    Start a new section following the <B2BKeyrings> section, using the value of ShareRingAlias as the section name.

    A new section for specifying some attributes of the key is started.

    Note: The type of encryption to use, such as AES128, is specified in the DFSMS data class description following the digital certificate name.

  2. Specify the KeyringName that includes the digital certificate of the business partner.

    CA Tape Encryption can now refer to the public key in the business partner's digital certificate.

  3. Specify the B2BRsaKeepHours.

    The length of time to retain the dynamically created single-use symmetric key in the database is established.

    The symmetric key is generated at run time based on the algorithm specified in the DFSMS data class.

Note: For more information about specifying the encryption type for B2B tapes, see the chapter “Selecting Tape Files for Encryption Using DFSMS.”