Defining Security Protection Profiles in IBM Security Server RACF › Select Data Sets for Encryption with RACF › Data Set Selection Profiles

Data Set Selection Profiles

Data set selection profiles can be defined as discrete, fully-qualified, or generic. Regardless of which definition method used (discrete or generic) each data set selection profile is defined to the CA@BES resource class and prefixed with the constant: “DSN.” (the letters DSN followed by a period '.').

Note: Do not confuse CA@BES data set selection profiles with RACF data set resource protection profiles. CA Tape Encryption data set profiles are definitions that reside in the CA@BES resource class, are prefixed with the constant DSN, and are used only to select datasets for encryption.

This data set selection profile has the following format:

RDEF CA@BES DSN.data.set.name                                   
     OWNER(username)                                            
     APPLDATA('BESn=(encryption.parameter))

RDEF

Specifies the RDEFINE command.

CA@BES

Specifies the general resource class for CA Tape Encryption. This is always CA@BES.

DSN.

Specifies the constant “DSN.” This is used to denote a data set selection profile.

Data.set.name

Specifies the discrete, fully-qualified, or generic data set name that is to be encrypted.

OWNER(username)

Specifies the user name of the principle owner of the profiles, typically the security administrator.

APPLDATA('BESn=(encryption.parameter)

Specifies the encryption key used to encrypt the data set. The encryption parameter must be coded using the format for symmetric keys, code books, or digital certificates.