Define the IBM Connect:DirectVSAM Files
Pervasive Encryption of Datasets
Pervasive encryption of the VSAM Control files can be done using the parameters below in the
IDCAMS DEFINE of datasets.
Parameter | Description |
---|---|
DATACLAS(dataclass) | To ensure the VSAM data set is created with extended format, you must specify a data class that includes DSNTYPE(EXTREQ) in the IDCAMS DEFINE. Data class identifies the name, 1-to-8 characters of the data class for the new VSAM data set. A data class provides multiple optional allocation attributes for new data sets, including DSNTYPE. |
KEYLABEL(keyvalue) | Identifies the name, up to 64 bytes, of the key label to be used to encrypt the new data set. |
For more information on Pervasive Encryption of datasets please refer the following mentioned
links:
- Familiarize yourself with IBM Documentation on z/OS Cryptography. See the following:
- Ensure that you have set up the key labels to be used by IBM Connect:Direct. See the
following:
- Managing Cryptographic Keys Using the Key Generator Utility Program in z/OS Cryptographic Services: ICSF Administrator’s Guide
- Ensure that the RACF® tasks to provide authority to create encrypted data sets and to
provide access to the key labels are complete. See the following:
- Setting up z/OS data set encryption in Pervasive Encryption for IBM Z
- Getting started with RACF in Encryption Facility for z/OS: Planning and Customizing