SAF Interface Parameter Reference List › SAF Interface External Security Manager Command Reference › CA Top Secret Data Set Selection Profiles

CA Top Secret Data Set Selection Profiles

The following profiles should be used when defining CA Tape Encryption processing data set selection profiles.

Define Data Set Selection Prefix:

TSS ADDTO(department) CA@BES(DSN.prefix.value)

TSS ADDTO(BESACID) CA@BES(DSN.ACH)

TSS ADDTO(BESACID) CA@BES(DSN.BACKUP)

Note: You use data set selection prefix profiles to define the prefix for data set selection name profiles. The data set selection prefix value is limited to 26 characters. The PERMIT command is used to further qualify the data set name.

Generic Data Set Selection Profile:

TSS PERMIT(besacid) CA@BES(DSN.prefix.generic.data.set) +
    ACCESS(READ) APPLDATA('BESn=(encryption_key)')

TSS PERMIT(BESACID) CA@BES(DSN.BACKUP.HSM) +
    ACCESS(READ) APPLDATA('BES=(AES128')

Discrete/Fully-Qualified Data Set Selection Profile:

TSS PERMIT(besacid) CA@BES(DSN.prefix.discrete.data.set.name) +
    ACCESS(READ) APPLDATA('BESn=(encryption_key)')

TSS PERMIT(BESACID) CA@BES(DSN.ACH.PROD.BDTRNFO.FEDXMIT) +
    ACCESS(READ) APPLDATA('BES=(FEDKEY')

Default Data Set Selection Profile:

TSS ADDTO(department) CA@BES(BES.DEFAULT)

TSS PERMIT(besacid) CA@BES(BES.DEFAULT) +
    ACCESS(READ) APPLDATA('BESn=(encryption_key)')