z/OS V1R6.0 DFSMS Access Method Services for Catalogs

REPROvvvvvINFILE points to the CRYPT DD statement, identifying the tape containing theenciphered source data.OUTFILE points to the CLEAR DD statement, identifying the data set to containthe deciphered data, RRDS2. The defined record size must be the same as that ofthe original relative record data set.DECIPHER indicates that the source data set is to be deciphered as it is copiedto the target data set.SYSTEMKEY indicates that keys are managed by the Program CryptographicFacility, the Cryptographic Unit Support, or the z/OS Integrated CryptographicService Facility.SYSTEMKEYNAME supplies the key name, BKEY27, of the internal file key thatwas used to encipher the system data encrypting key. The file key must be aninternal file key in this system.Encipher Using Private Keys: Example 9In this example, an enciphered copy of a SAM data set is produced by using anentry-sequenced data set as the target data set. The enciphered data set resides ona volume that is to be stored offline at the local installation. Each record in thetarget data set is enciphered separately, using a data encrypting key supplied bythe user with a data encrypting key data set. Keys are managed privately by theuser.//ENPRI JOB ...//STEP1 EXEC PGM=IDCAMS//CLEAR DD DSN=SAMDS1,DISP=OLD,// VOL=SER=VOL005,UNIT=DISK//CRYPT DD DSN=ESDS1,DISP=OLD//KEYIN DD *X'53467568503A7C29'/*//SYSPRINT DD SYSOUT=A//SYSIN DD *REPRO -INFILE(CLEAR) -OUTFILE(CRYPT) -REUSE -ENCIPHER -(PRIVATEKEY -DATAKEYFILE(KEYIN))/*Job control language statements:vvvCLEAR DD describes the SAM data set.CRYPT DD describes the entry-sequenced data set.KEYIN DD describes the data encrypting key data set consisting of a singlerecord containing the data encrypting key.The REPRO command copies all records enciphered under the supplied dataencrypting key, from the source data set, SAMDS1, to the target data set, ESDS1.The plaintext private data encrypting keys is not listed on SYSPRINT, because theuser manages the key. The parameters of the REPRO command are:vvINFILE points to the CLEAR DD statement, identifying the source data set to beenciphered, SAMDS1.OUTFILE points to the CRYPT DD statement, identifying the target data set,ESDS1. The defined maximum record size of the entry-sequenced data set mustbe large enough to accommodate the largest SAM record.Chapter 30. REPRO 325