ALLOWDESAUTH

Edit online

The ALLOWDESAUTH option specifies whether to allow use of the Data Encryption Standard (DES) algorithm for authentication between an IBM Storage Protect server and a backup-archive client.

To allow the use of DES, specify a value of YES for the ALLOWDESAUTH option.
To configure the IBM Storage Protect server to be in compliance with the NIST SP800-131A standard, ensure that this option is set to NO.
Attention: To prevent authentication failures from causing operations, such as a backup operation to fail, you must manually set the ALLOWDESAUTH option to YES in the following circumstances:
  • Automatic deployment of backup-archive client versions earlier than version 7.1.8 or version 8.1.2
  • Connecting a server with backup-archive client version 6.2 or earlier
If you fail to set the option to YES in these circumstances, the connection to backup-archive clients fails, and client data is not backed up. Should a failure occur, error messages such as ANS1357S, ANR0428W, or ANR0404W are displayed.

Syntax

Read syntax diagramSkip visual syntax diagramALLOWDESAUTHNoALLOWDESAUTHNoYes

Parameters

No
Specifies that the server rejects any backup-archive clients that attempt to authenticate with DES-based encryption. The default is NO.
Yes
Specifies that the server allows authentication with any backup-archive clients that use DES-based encryption.

Examples

Specify that the server rejects any backup-archive clients that attempt to authenticate with DES encryption:

allowdesauth no

Specify that the server allows authentication with any backup-archive clients that use DES encryption:

allowdesauth yes