Defining Security Protection Profiles in CA Top Secret › Select Data Sets for Encryption with CA Top Secret

Select Data Sets for Encryption with CA Top Secret

CA Tape Encryption provides two different ways to enable CA Top Secret to select data sets for encryption. The first method is to define data set selection profiles using the ADDTO and PERMIT command combination to define discrete, fully-qualified, or generic data set selection profiles. Another option is to encrypt all data sets using the BES.DEFAULT profile.

Note: BES.DEFAULT, if defined, will only be used when a more specific selection profile is not matched.

The data set selection profiles are comprised of two parts. The first part is the data set name component and the second part is the encryption parameter component. The data set prefix or model is defined to CA Top Secret by using the ADDTO command. The PERMIT command is used to define the generic, discrete, or fully-qualified data set name and to define the encryption parameter.

The encryption parameter component identifies the encryption key used when creating the encrypted data set. For CA Top Secret, the encryption parameter component is stored in the 255 byte APPLDATA data field of the PERMIT command.