|
|
|
CA Tape Encryption is distributed with jobs and utilities in the CTAPJCL data set that you can use to manage and maintain the product at your site, and to gather data for problem analysis.
Note: For information about running any of these jobs, see the instructions in the appropriate member in CTAPJCL.
The following list describes the members in the CTAPJCL data set and their uses:
Demonstrates how to run the TBECKMUT utility to extract records from the CA Tape Encryption or CA Encryption Key Manager log data set into the extract log.
Demonstrates how to run the TBECKMUT utility to report on SMF events.
Exports code books from an active BES database to a sequential data set suitable for transmission to non-z/OS B2B business partners. You must run this job against all code books that are used to encrypt B2B tapes. After running the job, you must send the resulting export file to your B2B partners to enable them to decrypt your B2B tapes. This job requires a passkey to encrypt the export file, and you must also provide this passkey to your B2B partners.
Creates a tape backup copy of the BES mirror database. Run this job on a regular basis. Keep at least six generations of the backup data in a safe location.
Restores the BES primary database from a backed-up copy of the BES mirror database. Before running this job, use BESPALC to delete and redefine the BES primary database.
Lists the DFSMS data classes that have valid BES information in the data class description field.
Produces a disk file of the last 1000 encryption and decryption detail records in the BES data space. The records written to disk are 512 bytes in length. Each record conforms to a valid SMF record, where the first two bytes contain the length of the data.
Copies the active SYS1.LOGREC data set to a disk data set, and reports the contents. Send the output file from this job to Technical Support for problem analysis when requested.
Inspects your z/OS system and reports details on ICSF, cryptographic coprocessors, and CA Tape Encryption tape interface and service modules in storage.
Formats log entries from the BES log data space (in storage) and saves them to a DASD data set. If you are using a DASD log stream, use the IPCS job to format the entries. Send the output file from this job to Technical Support for problem analysis when requested.
Formats selected log entries from a DASD log stream and saves them to a DASD data set. Send the output file from this job to Technical Support for problem analysis when requested.
Performs verification of a successful installation. Run this job after you have installed CA Tape Encryption and configured your DFSMS data classes. The expected results and return codes are documented in the job itself.
Copies selected entries from a DASD log stream to a sequential file. Send the output file from this job to Technical Support for problem analysis when requested.
Deletes and redefines a single database for CA Tape Encryption. The database is either the BES primary database or the BES mirror database. Use this job when recovering the BES primary database from the BES mirror database or when recovering the BES primary database from a tape copy of the BES mirror database.
Copies the BES mirror database to the BES primary database. Use this job when the BES primary database is corrupted or unusable. Delete and redefine the BES primary database using sample job BESPALC.
Prints the contents of the header labels, a portion of the data, and the trailer labels of a tape file encrypted by CA Tape Encryption.
Provides JCL for the TBESAF99 control statement generation utility.
Produces a list of the BES system parameters, symmetric key labels, and RSA key labels.
Copies members from the CTAPJCL library to the system procedure library that you specify.
Allocates both the BES primary database and the BES mirror database. If you are deleting and defining a single BES database, use the BESPALC job instead.
Executes the TSO batch Terminal Monitor Program (TMP) to add and maintain CA Tape Encryption security profile definitions for CA ACF2.
Lists the contents of the CA@BES resource class, the OPERCMDS resource class, and external security manager processing and control options for CA ACF2.
Validates the input parameters of a BES started task. This job is useful for checking new parameters without having to use the started task as the validation mechanism.
Executes the TSO batch TMP to add and maintain CA Tape Encryption security profile definitions for RACF.
Lists the contents of the CA@BES resource class, the OPERCMDS resource class, and external security manager processing and control options for RACF.
Executes the TSO batch TMP to add and maintain security profile definitions for CA Top Secret.
Lists the contents of the CA@BES resource class, the OPERCMDS resource class, and external security manager processing and control options for CA Top Secret.
| Copyright © 2011 CA. All rights reserved. | Tell Technical Publications how we can improve this information |