z/OS V1R6.0 DFSMS Access Method Services for Catalogs

REPROThe REPRO command copies 50 records enciphered from a generated dataencrypting key, from the source data set, RRDS1, to the output tape. The sourcerecords are enciphered in units of 4 records, except for the last 2 records, which areenciphered together. The enciphered data encrypting key is stored in the header ofthe target data set; therefore, REPRO will not list the key name or enciphered dataencrypting key in SYSPRINT. The parameters of the command are:vvvvvvvvINFILE points to the CLEAR DD statement identifying the source data set to beenciphered, RRDS1.OUTFILE points to the CRYPT DD statement, identifying the target data set ontape.COUNT indicates that 50 records are to be copied.ENCIPHER indicates that the target data set is to contain an enciphered copy ofthe source data set.EXTERNALKEYNAME supplies the name, AKEY27, of the external file key tobe used to encipher the data encrypting key.STOREDATAKEY indicates that the data encrypting key enciphered under thesecondary file key is to be stored in the header of the target data set.CIPHERUNIT indicates that 4 source records at a time are to be enciphered as aunit.USERDATA specifies a character string, CONF, to be stored in the header of thetarget data set as user data.Decipher Using System Keys: Example 8In this example, the enciphered data set produced by the job in Encipher UsingSystem Keys: Example 7 is deciphered, using a VSAM relative record data set asthe target for the plaintext (deciphered) data. The empty slots in the original dataset are reestablished. Keys are managed by the Programmed Cryptographic Facilityor the Cryptographic Support Unit.//DESYS JOB ...//STEP2 EXEC PGM=IDCAMS//CRYPT DD DSN=RRDSEN,LABEL=(1,SL),DISP=OLD,// UNIT=3480,VOL=SER=TAPE01,// DCB=DEN=3//CLEAR DD DSN=RRDS2,DISP=SHR//SYSPRINT DD SYSOUT=A//SYSIN DD *REPRO -INFILE(CRYPT) -OUTFILE(CLEAR) -DECIPHER -(SYSTEMKEY -SYSTEMKEYNAME(BKEY27))/*Job control language statements:vvCRYPT DD describes and allocates the magnetic tape containing the enciphereddata.CLEAR DD describes the relative record data set.The REPRO command copies and deciphers the enciphered data set from thesource tape to the target data set RRDS2. The enciphered data encrypting key isobtained from the header of the source data set. Use the internal file key (BKEY27)to decipher the enciphered data encrypting key that is then used to decipher thedata. The parameters of the REPRO command are:324 z/OS V1R6.0 DFSMS Access Method Services for Catalogs