|
|
|
The default data set selection profile (BES.DEFAULT) can be defined to encrypt tape data sets not explicitly defined to CA@BES or to encrypt all tape data sets using a default encryption key. When defining BES.DEFAULT the APPLDATA field contains a default BESn subsystem number and encryption key.
CA Tape Encryption will search CA@BES locating a matching DSN data set selection profile. If a match is not found, CA Tape Encryption will again search CA@BES trying to locate the default encryption profile, BES.DEFAULT. If neither profile is located, DFSMS will be used to make the encryption determination.
CA Tape Encryption relies on the external security manager for data set name pattern matching. The actual data set name matching will be performed by CA ACF2, CA Top Secret, and IBM Security Server RACF, and reported in the BES logging facility.
| Copyright © 2011 CA. All rights reserved. | Tell Technical Publications how we can improve this information |