Encrypting CQS SRDS data sets

Use IDCAMS to define two new encrypted SRDSs the same size as or larger than the current SRDSs.

For the purpose of this example, assume the original SRDSs are named SRDS1 and SRDS2, and the new SRDSs are named SRDS1.NEW and SRDS2.NEW.

If all CQSs are down, perform the following steps to encrypt CQS SRDS data sets:

  1. Use IDCAMS REPRO to copy both SRDSs from the old data sets to the new encrypted data sets.
  2. If the copies were successful, perform the following steps:
    1. Rename the old SRDSs to another name (such as SRDS1 to SRDS1.OLD and SRDS2 to SRDS2.OLD)
    2. Rename the new SRDSs to be the original SRDS data set names (SRDS1.NEW to SRDS1, SRDS2.NEW to SRDS2). You must rename both the VSAM base data set name and the .DATA data set associated with it (for example, SRDS1 and SRDS1.DATA).
  3. Start CQS. Take two structure checkpoints to verify CQS can read and write to the new SRDSs.

If one or more CQSs are active, perform the following steps to encrypt CQS SRDS data sets:

  1. Use IDCAMS REPRO to copy one SRDS (for example, SRDS1) from the old data set to the corresponding new encrypted data set.
  2. If the copies were successful, perform the following steps:
    1. Rename the SRDS1 to SRDS1.OLD.
    2. Rename the SRDS1.NEW to SRDS1. Note that you must rename both the VSAM base data set name and the .DATA data set associated with it (for example, SRDS1 and SRDS1.DATA).
    3. Take a structure checkpoint to ensure that CQS can access the new encrypted data set. If the new SRDS cannot be opened by CQS, rename the new and old SRDSs back to their original names and take two structure checkpoints.
  3. If the structure checkpoint was successful, repeat step1 and 2 with SRDS2. Ensure that no CQS structure checkpoints are taken while you are copying and renaming an SRDS with active CQSs.