Previous Topic: STOP Command—Stop CA Tape Encryption Subsystem

Next Topic: Command Protection

Console Commands

The console commands are used to display the status of CA Tape Encryption parameter settings and activity, change the parameter settings, or initiate new CA Tape Encryption activity.

Note: The BESn HELP console command displays the syntax for all valid commands.

The following table provides a quick reference of all the console commands with a brief description. Each command is discussed in greater detail following the table.

If the command description is prefixed by PARMLIB:, that command is for the parmlib function.

Command

Description

COMPROMISE=

Used to flag compromised code books or symmetric keys.

DISPLAY ACTIVE | CSA | LOGGER | PARMLIB | SECURITY | STATUS

Displays encryption activity, logging information, parmlib information, security profile options, and status of non-parmlib options.

DUMP

Dumps the CA Tape Encryption address space for the specified BES task.

HELP

Provides on-console syntax for all console commands.

MIGRATE=FROMCKDS | FROMCKDS,MOVE | TOCKDS | TOCKDS,MOVE

Used to copy or move keys from the CKDS to the BES database and back. These commands are useful when you have a cryptographic coprocessor in your normal test system but not at your disaster recovery site.

REFRESH=CAEKM_API_OPTIONS|KEYRINGS | CODEBOOKS | SYMKEYS | OPTIONS

PARMLIB: Used to dynamically activate key section changes, CodeBook section changes, SymmetricKeys section changes, or DynamicOptions section changes.

RELOAD= COMPRESSSION | PASSPHRASE | SECURITY | TBEKAPI|TEP

Used to reload compression options, change the pass phrase for protecting sensitive data in the BES database, reload security profile settings, reload the security (SAF Interface) global module, and for reloading the TBETEP global module. Use the TEP command with caution.