Using Your Security System › Security Profiles › CA Encryption Parameter Information in DATA, APPLDATA, or $USERDATA › Specify a B2B Tape Using Digital Certificates

Specify a B2B Tape Using Digital Certificates

Specify the digital certificate label name and the algorithm to use for encryption.

The syntax for the character string value has the following format:

('BESn=(RSA(ringname_alias):certificate_label.algorithm)')

n

Specifies an identifying number for a CA Tape Encryption subsystem other than BES1. Specifying “BES=” is the same as specifying “BES1=”. This does not mean that the encryption request can be processed by any active BES subsystem.

RSA(ringname_alias)

Specifies that a B2B tape uses the RSA algorithm for public key cryptography. The ringname_alias in parenthesis specifies the value specified by the ShareRingAlias or UserRingAlias in parmlib. CA Tape Encryption searches on the specified key ring name for the digital certificate.

certificate_label

Specifies the digital certificate to use.

algorithm

Specifies the encryption algorithm for creating the randomly-generated symmetric key that is used to encrypt the data on the tape.

Example: Specify a digital certificate

In this example, BES2=(RSA(Partner2):mycert.3DES192) indicates that this tape uses the digital certificate identified as mycert, associated with the Partner2 key ring alias, to encrypt the symmetric key that is used to encrypt the data on the tape. 3DES192 indicates the algorithm to use for the symmetric key that encrypts the data on the tape. BES2 indicates that this is a tape for subsystem BES2.

('BES2=(RSA(Partner2):mycert.3DES192)')