Encrypting full function VSAM database data sets (non-HALDB, or not OLR-capable)

You can enable z/OS data set encryption for full function VSAM database data sets (non-HALDB, or not OLR-capable).

Besides the following steps, you may also be able to use a separate online reorganization product to perform a database reorganization without taking the database offline. Consult your online reorganization tool documentation for details.

Procedure

  1. Preallocate the new database data sets with key labels.
  2. Take the database offline (e.g. /DBR DB, UPDATE DB STOP(ACCESS) ).
  3. Run the appropriate unload utility (DFSURUL0 or DFSURGU0).
  4. Note: Note that if prefix resolution is required, the sort that is done will create temporary work data sets that are not encrypted. DFSMS does not support sort work data sets as extended format.
    Run the appropriate reload utility (DFSURRL0 or DFSURGL0) to reload the database into the encrypted data sets.
  5. Rename the old data sets to a backup name.
  6. Rename the new data sets to the correct database data set names.
  7. Bring the database online (e.g. /STA DB, UPDATE DB START(ACCESS) ).