The syntax of the REKEY statement is:
Label |
Statement |
Parameters |
---|
ddname |
REKEY |
SER=volser |
|
|
[,DISP={REWIND|UNLOAD}] |
|
|
[,NUMBTAPE={n|1}] |
|
|
[,KEYLABL1=keylabel1] |
|
|
[,KEYENCD1={L|H} |
|
|
[,KEYLABL2=keylabel2] |
|
|
[,KEYENCD2={L|H} |
where:
- KEYLABL1=keylabel1_name
- specifies
the first key label for the key encryption key used by the Encryption
Key Manager. To specify the key label value, you can use up to 64
characters with blanks padding the field on the right. The characters
can be alphanumeric, national, or special characters with some additional
characters also allowed. If the label contains blanks or special characters,
you must enclose it in single quotation marks. IEHINITT does not validate
the character set that you specify for the key label keyword.
- KEYLABL2=keylabel2_name
- specifies
the second key label for the key encryption key used by the Encryption
Key Manager.
- KEYENCD1={L|H}
- specifies
the encoding mechanism of the first key label.
- L = encoded as the specified label
- H = encoded as a hash of the public key
- KEYENCD2={L|H}
- specifies
the encoding mechanism of the second key label.
Attention: You must specify at least one key label and
the corresponding key encoding mechanism. You can specify the same
value for both key labels. If you specify only one key label, the
Encryption Key Manager uses the same value for the second key label.
You can use the same set of key labels for a list of volumes, or you
can specify different key labels and corresponding encoding mechanisms
for each volume.