Using CA Tape Encryption in Your z/OS Environment › Integrated Compression for Symmetric Key Encryption › Sample Compression Scenarios › Compression Scenario with Global Options for All Keys

Compression Scenario with Global Options for All Keys

In this scenario the Compression= attribute in the dynamic options is set to Y. This indicates that all files that are candidates for encryption will use the S0 compression method. Any Compression= attribute specified for the individual key in the symmetric key options is ignored. The COMPKEY1 key is used to encrypt the file. It specifies the use of the S4 compression method. Because the dynamic options setting specifies that all files will use the S0 compression method, this attribute is ignored. All files using the COMPKEY1 key will use the S0 compression method. Because the MinimumCompressionRate is specified in the <DynamicOptions> and not in the <SymmetricKey> options, the minimum compression rate of 75 percent is used.

In this scenario, the following settings are used for the <DynamicOptions> parmlib member:

<DynamicOptions>
  logdetaillevel =3
  logstream = VTAPE.XE90.LOG
  EncryptFailAction    = continue
  TMSUpdate            = Y
  Failovercandidate    = Y
  keyringsearchorder   =  UserKeyringFirst
  Compression = Y
  MinimumCompressionRate = 75

In this scenario, the following settings are used for the COMPKEY1 key definition in the <SymmetricKey> parmlib member:

<SymmetricKey>

<COMPKEY1>
   Algorithm = AES128   
   Regenerate = monthly 
   Compression = S4