Keywords › MASKDATA Keyword—SDT Record Mask

MASKDATA Keyword—SDT Record Mask

Valid on z/OS, VSE, and z/VM.

Use the MASKDATA keyword to add, remove, or replace a MASKDATA field in the MASK record of the SDT Record. MASKDATA allows the administrator to specify field characteristics and a mask‑character‑string used to overlay the protected field within an associated RECORD.

If using RLP:

• Add the RLP record to the SDT
• Give the RECDATA layout and create the necessary SELECT criteria
• Add the MASK record and MASKDATA to the SDT

This keyword has the following format:

TSS ADDTO(SDT) MASKREC(mask‑name)
               MASKDATA(field‑definition

field‑definition

Contains the layout of the field to be masked. You can specify up to five fields on each MASKDATA keyword. Each field‑definition operand consists of five sub‑fields:

fld‑name

Specifies a field name unique to this MASK record. The name can consist of letters, digits, or national characters and can be qualified with periods (.), underscores (_), or hyphens (‑).

Range: Up to 24 characters

type

Indicates a field type. Replace type with one of these values:

• CHAR—Specifies any of the EBCDIC characters, left‑justified and padded with blanks.
• BIN—Specifies up to 16 decimal digits with optional sign. If no sign is specified, a positive value is assumed.
• PACKED—Specifies up to 16 decimal digits with optional sign. If no sign is specified, a positive value is assumed.
• ZONED—Specifies up to 16 decimal digits with optional sign. If no sign is specified, a positive value is assumed.
• HEX—Specifies up to 256 hexadecimal digits (0‑F) left‑justified and padded with nulls (X"00").

offset

Indicates an up to five‑digit initial position (relative to 1) for the field value that must not exceed the record length.

length

Indicates a decimal value for the length of the masked field.

Range: 1 to 44

mask

Indicates a mask value that can contain letters, numbers, and special characters. However, the mask value must match the field's data type. See the table below for specific rules.

Size: Up to 44‑character

Note: Do not use quotes to surround the mask unless they are actually included in the mask.

The following table illustrates a mask‑field type and its respective mask‑field literal type:

This keyword is used with:

• The commands ADDTO, REMOVE, and REPLACE
• The SDT Record
• MISC3(SDT) authority

Examples: MASKDATA keyword

This example adds a MASKDATA field to the MASK record CRYPT1 that contains a salary field in character format called ADDR, masked field with an asterisk (*), having an offset value of 50 and a length of 20 characters:

TSS ADDTO(SDT) MASKREC(CRYPT1)
               MASKDATA(ADDR,CHAR,50,20,********************)

This example replaces an existing MASK record with one new field:

TSS REPLACE(SDT) MASKREC(CRYPT1)
                 MASKDATA(ADDR,CHAR,50,10,**********)

Even though only one field's worth of data is entered with the REPLACE syntax, all previously entered fields are replaced by the single field entered in the REPLACE command. If the MASK record consists of seven fields, all seven original fields are lost and one new field replaces them. There is no command to replace a single field.