z/OS V1R6.0 DFSMS Access Method Services for Catalogs

REPROThis section lists and describes the REPRO cryptographic parameters.ENCIPHERspecifies that the source data set is to be enciphered as it is copied to the targetdata set.Abbreviation: ENCPHREXTERNALKEYNAME(keyname) |INTERNALKEYNAME(keyname)|PRIVATEKEYspecifies whether you, PCF, or ICSF manages keys privately.EXTERNALKEYNAME(keyname)specifies that PCF or ICSF manages keys. This parameter also supplies the1-to-8 character key name of the external file key that is used to encipherthe data encrypting key. The key is known only by the deciphering system.The key name and its corresponding enciphered data encrypting key arelisted in SYSPRINT only if NOSTOREDATAKEY is specified.Abbreviation: EKNINTERNALKEYNAME(keyname)specifies that PCF or ICSF manages keys. This parameter also supplies the1-to-8 character key name of the internal file key that is used to encipherthe data encrypting key. The key is retained by the key-creating system.The key name and its corresponding enciphered data encrypting key willonly be listed in SYSPRINT if NOSTOREDATAKEY is specified.Abbreviation: IKNPRIVATEKEYspecifies that the key is to be managed by you.Abbreviation: PRIKEYCIPHERUNIT(number |1)specifies that multiple logical source records are to be enciphered as a unit.Number specifies the number of records that are to be enciphered together. Byspecifying that multiple records are to be enciphered together, you can improveyour security (chaining is done across logical record boundaries) and alsoimprove your performance. However, there is a corresponding increase invirtual storage requirements. The remaining records in the data set, after thelast complete group of multiple records, are enciphered as a group. (If numberis 5 and there are 22 records in that data set, the last 2 records are encipheredas a unit.)The value for number can range from 1 to 255.Abbreviation: CPHRUNDATAKEYFILE(ddname)|DATAKEYVALUE(value)specifies that you are supplying a plaintext (not enciphered) data encryptingkey. If one of these parameters is not specified, REPRO will generate the dataencrypting key. These parameters are valid only when EXTERNALKEYNAMEor PRIVATEKEY is specified. If INTERNALKEYNAME and DATAKEYVALUEor DATAKEYFILE are specified, REPRO will generate the data encrypting keyand DATAKEYVALUE or DATAKEYFILE are ignored by REPRO.The plaintext data encrypting key will not be listed in SYSPRINT unlessPRIVATEKEY is specified and REPRO provides the key.Chapter 30. REPRO 315