z/OS V1R6.0 DFSMS Access Method Services for Catalogs

REPRODATAKEYFILE(ddname)identifies a data set that contains the plaintext data encrypting key. Forddname, substitute the name of the JCL statement that identifies the dataencrypting key data set.Abbreviation: DKFILEDATAKEYVALUE(value)specifies the 8-byte value to be used as the plaintext data encrypting key toencipher the data.Value can contain 1-to-8 EBCDIC characters or 1-to-16 hexadecimalcharacters coded X'n'. Value must be enclosed in single quotation marks ifit contains commas, semicolons, blanks, parentheses, or slashes. A singlequotation mark must be coded as two single quotation marks. With eitherEBCDIC or hexadecimal representation, value is padded on the right withblanks (X'40') if it is fewer than 8 characters.Abbreviation: DKVSHIPKEYNAMES(keyname[ keyname...])supplies the 1-to-8 character key name of one or more external file keys to beused to encipher the data encrypting key. Each key name and itscorresponding enciphered data encrypting key is listed in SYSPRINT, but is notstored in the target data set header. The primary use for this parameter is toestablish multiple enciphered data encrypting keys to be transmitted to otherlocations for use in deciphering the target enciphered data set. This parameteris valid only when INTERNALKEYNAME or EXTERNALKEYNAME isspecified.Abbreviation: SHIPKNSTOREDATAKEY|NOSTOREDATAKEYspecifies whether the enciphered data encrypting key is to be stored in thetarget data set header. The key used to encipher the data encrypting key isidentified by INTERNALKEYNAME or EXTERNALKEYNAME. Thisparameter is valid only when INTERNALKEYNAME orEXTERNALKEYNAME is specified. If the enciphered data encrypting key isstored in the data set header, it does not have to be supplied by the user whenthe data is deciphered.Restriction: A data encrypting key enciphered under the keys identified bySHIPKEYNAMES cannot be stored in the header. Therefore, you might want toavoid using STOREDATAKEY and SHIPKEYNAMES together because thiscould result in storing header information unusable at some locations.STOREDATAKEYspecifies that the enciphered data encrypting key is to be stored in thetarget data set header.Abbreviation: STRDKNOSTOREDATAKEYspecifies that the enciphered data encrypting key is not to be stored in thetarget data set header. The keyname and its corresponding enciphered dataencrypting key is listed in SYSPRINT.Abbreviation: NSTRDKSTOREKEYNAME(keyname)specifies whether to store a keyname for the key used to encipher the dataencrypting key in the target data set header. The specified keyname must be316 z/OS V1R6.0 DFSMS Access Method Services for Catalogs