PK44172: DITTO/ESA FOR VSE 3592 TAPE ENCRYPTION SUPPORT

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• Provide new function to support 3592 data encryption-capable
  devices.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of Ditto/ESA for VSE Ver 1 Rel 3.  *
  ****************************************************************
  * PROBLEM DESCRIPTION: D/T3592-E05 Tape Encryption support is  *
  *                      being introduced for DITTO/ESA for VSE. *
  *                      This also requires z/VSE Apars DY46682  *
  *                      (z/VSE 4.1), or, DY46685 (z/VSE 3.1).   *
  ****************************************************************
  * RECOMMENDATION: Apply the supplied PTF.                      *
  ****************************************************************
  DITTO/ESA for VSE Users do not have D/T 3592 tape encryption
  support in full-screen (interactive) mode.
  

Problem conclusion

Temporary fix

Comments

• DITTO/ESA for VSE has been changed to support D/T3592 encryption
  capable devices in full-screen (interactive) mode. For batch
  mode, encryption functionality is provided by use of z/VSE JCL.
  ---------------------------------------------------------------
  Publication Closing Code: DEVCHNG
  SH19-8221-02 DITTO/ESA User's Guide and Reference
  
  Chapter 6. Processing Tapes Page 67
  
  add following to table Figure 43 Density/Mode Values
  MM           Mode for 3592 Encryption capable Tapes
  0B           Compaction (IDRC), buffered write mode, encryption
  2B           Compaction (IDRC), immediate write mode, encryption
  03           No compaction, buffered write mode, encryption
  23           No compaction, immediate write mode, encryption
  
  
  Chapter 6. Processing Tapes Page 83
  
  add following new section after "Erasing Tape Records" section
  
  "VSE:  Tape Hardware Encryption"
  
  The functions listed below allow input of Key Encrypting Key
  Labels (KEKLs) when requiring tape encryption and using
  DITTO/ESA in Full Screen mode.
  
  The fields titled K1/K2 are synonymous with the KEKL1/KEKL2
  Encryption Key labels. E1/E2 is synonymous with the KEM1/KEM2
  Encoding mechanism also discussed below.
  
  KEKL1/KEKL2 - Encryption key labels. One or both key labels may
  be specified. If a key label is specified then its encoding
  mechanism (KEM1/KEM2) must also be is specified. If an encoding
  mechanism is specified then its corresponding key label must
  also be specified. The KEM1/KEM2 is one character in length,
  and can only be 'L' or 'H', or blank (if no KEKL specified).
  
  If only one key label is specified, it may be specified as key
  label 1 only. If only one key label is specified, the same key
  label and encoding mechanism is used to generate both External
  Encrypted Data Keys (EEDKs) that are stored on the tape.
  
  The first character of the key label must be alphabetic, or a
  national character (#, $, @). The remaining characters may be
  alphabetic, numeric, national, or a period. The key label can be
  up to 64 characters with blanks padding the field on the right.
  
  When writing from loadpoint, if two different key labels are
  specified, both key labels must be defined to the key store and
  accessible by the external key manager (EKM).
  
  KEKL information can only be entered when the entered mode
  specifies a valid encryption mode of 03, 23, 0B or 2B and
  in the following DITTO/ESA functions.
  
  BT  Create Tape File
  CT  Card to Tape
  INT Initialize Tape
  LT  Library Member to Tape
  TFT Tape File to Tape File
  TLT Tape to Labeled Tape
  TRL Tape Record Load
  TT  Tape to Tape Copy
  TTR Tape to Tape Reblocked
  TU  Tape Update
  ST  Sequential Data to Tape
  QT  Sequential Data to Tape
  VT  VSAM to Tape
  
  Refer to z/VSE V4R1.0 Administration SC33-8304-00 for
  further details regarding Tape Hardware Encryption in z/VSE.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UK25683

Modules/Macros

•    DITFKEK  DITFMD   DITHTO   DITMSG00 DITM00
  DITPBT   DITPCT   DITPERT  DITPINT  DITPLT   DITPQT   DITPTFT
  DITPTLT  DITPTRL  DITPTT   DITPTTR  DITPTU   DITPVT   DITPWTM
  DITRMDAT DITRMT   DITRMVSE DITTAPE2 DITTMTAB DITTPCB  DITTPFN
  DITTPIO  DIT0LVL
  

Fix information

• Fixed component name

  DITTO/ESA VSE

• Fixed component ID

  564809901

Applicable component levels

• R36O PSY UK25683

     UP07/07/02 P E411

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.