The console commands are used to display the status of CA Tape Encryption parameter settings and activity, change the parameter settings, or initiate new CA Tape Encryption activity.
Note: The BESn HELP console command displays the syntax for all valid commands.
The following table provides a quick reference of all the console commands with a brief description. Each command is discussed in greater detail following the table.
If the command description is prefixed by PARMLIB:, that command is for the parmlib function.
|
Command |
Description |
|---|---|
|
COMPROMISE= |
Used to flag compromised code books or symmetric keys. |
|
DISPLAY ACTIVE | CSA | LOGGER | PARMLIB | SECURITY | STATUS |
Displays encryption activity, logging information, parmlib information, security profile options, and status of non-parmlib options. |
|
DUMP |
Dumps the CA Tape Encryption address space for the specified BES task. |
|
HELP |
Provides on-console syntax for all console commands. |
|
MIGRATE=FROMCKDS | FROMCKDS,MOVE | TOCKDS | TOCKDS,MOVE |
Used to copy or move keys from the CKDS to the BES database and back. These commands are useful when you have a cryptographic coprocessor in your normal test system but not at your disaster recovery site. |
|
REFRESH=CAEKM_API_OPTIONS|KEYRINGS | CODEBOOKS | SYMKEYS | OPTIONS |
PARMLIB: Used to dynamically activate key section changes, CodeBook section changes, SymmetricKeys section changes, or DynamicOptions section changes. |
|
RELOAD= COMPRESSSION | PASSPHRASE | SECURITY | TBEKAPI|TEP |
Used to reload compression options, change the pass phrase for protecting sensitive data in the BES database, reload security profile settings, reload the security (SAF Interface) global module, and for reloading the TBETEP global module. Use the TEP command with caution. |
| Copyright © 2011 CA. All rights reserved. | Tell Technical Publications how we can improve this information |