OA55303: DATA ENCRYPTION SUPPORT SSE.

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• Data encryption support SSE.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of the zSecure Software suite.     *
  ****************************************************************
  * PROBLEM DESCRIPTION: Product enhancements to the zSecure     *
  *                      Software suite (enhancements for data   *
  *                      encryption support and SIEM feeds).     *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided and review the        *
  *                 documentation updates.                       *
  ****************************************************************
  This IBM® Security zSecure Enhancements for data encryption
  and SIEM feeds SSE provides the following topics of interest:
  1.  The capability to provide a near real-time feed for
      Security Information and Event Management (SIEM) solutions
      without the need for SMF logstreams.
  2.  Additional support for Pervasive Encryption:
      - Auditing of Coupling Facility structures.
      - Additional support for key labels, in connection to
        DFHSM maintenance from 2018Q1 (APAR OA52810).
      - Additional data set encryption information from SMF
        record type 42.
      - Additional z Encryption Readiness Technology (zERT)
        information from SMF record type 119.
      - Additional support for Integrated Cryptographic Services
        Facility (ICSF); in particular, SMF record type 82-4x
        key lifecycle and usage records.
  3.  Additional support for multiple data set sensitivities.
  4.  A new data sensitivity type for GDPR.
  5.  Capability to use mask specifications on SIMULATE statements
      to identify groups of sensitive data sets.
  6.  Usability and serviceability enhancements. For example:
      - SMF record summary provided in zSecure Alert to enable
        verifying proper configuration.
      - Ability to search application data in the user interface.
  

Problem conclusion

• The zSecure Software suite has been extended with new
  functionality (enhancements for data encryption and SIEM feeds).
  Please note the documentation updates as referred to by the APAR
  tracking comment data to view the full description of the
  extensions and fixes.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  OA55304 OA55407 OA55424

Modules/Macros

• C2PACMON C2PCKFAD C2PCKFCB C2PCLEAN C2PENVLP C2PESTAE C2PINIT
  C2PIORTN C2POLICE C2PPARSE C2PPRSRC C2PRPTMN C2PRPTRT C2PSMF86
  C2PSMFPC C2PSMFRT C2PSMFU8 C2R3AY0D C2R3AY0O C2R3CF#0 C2R3CF0#
  C2R3CF0$ C2R3CF01 C2R3CF02 C2R3CF03 C2R3CF04 C2R3CF05 C2R3CF06
  C2R3CF07 C2R3CF08 C2R3CF09 C2R3CF0@ C2R3CF0A C2R3CF0B C2R3CF0C
  C2R3CF0D C2R3CF0E C2R3CF0F C2R3CF0G C2R3CF0H C2R3CF0I C2R3CF0K
  C2R3CF0L C2R3CF0M C2R3CF0N C2R3CF0O C2R3CF0P C2R3CF0Q C2R3CF0R
  C2R3CF0S C2R3CF0T C2R3CF0U C2R3CF0V C2R3CF0W C2R3CF0X C2R3CF0Y
  C2R3CF0Z C2R3CF10 C2R3CF11 C2R3CF12 C2R3CF13 C2R3CF@0 C2R3CM06
  C2R3CM0C C2R3CN#0 C2R3CN01 C2R3CN02 C2R3CN03 C2R3CN04 C2R3CN05
  C2R3CN06 C2R3CN07 C2R3CN08 C2R3CN09 C2R3CN0A C2R3CN0B C2R3CN0C
  C2R3CN0D C2R3CN0E C2R3CN0F C2R3CN0G C2R3CN0H C2R3CN0I C2R3CN0J
  C2R3CN0K C2R3CN0L C2R3CN0M C2R3CN0N C2R3CN0O C2R3CN0P C2R3CN0Q
  C2R3CN0R C2R3CN@0 C2R3DS03 C2R3DS0G C2R3ECI  C2R3IS1G C2R3IS1H
  C2R3IS1I C2R3IS1J C2R3IS1K C2R3IS1L C2R3IS1M C2R3IS1N C2R3IS1O
  C2R3MN0T C2R3MN0U C2R3MN0V C2R3MN0W C2R3PK0L C2R3PK0M C2R3RA0P
  C2R3RS06 C2R3RZ0J C2R3SD05 C2R3SD16 C2R3SK0L C2R3SK0M C2R3SK15
  C2R3SK16 C2R3SM0# C2R3SM04 C2R3SM06 C2R3SM0B C2R3SM0F C2R3SM0L
  C2R3SM0V C2R3SM0Y C2R3SM0Z C2R3SM12 C2R3SM1C C2R3SM2@ C2R3SM2Y
  C2R3SM3C C2R3SM3I C2R3SM3J C2R3SM3U C2R3SMCT C2R3SMD2 C2R3SMDD
  C2R3SMFE C2R3SMG$ C2R3SMG@ C2R3SMGE C2R3SMGF C2R3SMGX C2R3SMGY
  C2R3SMGZ C2R3SMH0 C2R3SMH1 C2R3SMH2 C2R3SMH3 C2R3SMH4 C2R3SMH5
  C2R3SMH6 C2R3SMH7 C2R3SMH8 C2R3SMH9 C2R3SMHA C2R3SMHB C2R3SMHC
  C2R3SMHD C2R3SMHE C2R3SMHF C2R3SMHG C2R3SMHH C2R3SMHI C2R3SMHJ
  C2R3SMHK C2R3SMHL C2R3SMHM C2R3SMHN C2R3SMHO C2R3SMHP C2R3SMHQ
  C2R3SMHR C2R3SMHS C2R3SMHT C2R3SMHU C2R3SMZH C2R3SMZI C2R3SY45
  C2R3SY46 C2R3SY47 C2R3SY48 C2R3SY49 C2R3SY4A C2R3TR06 C2R3UN1D
  C2R3VD0V C2R3Z220 C2R3Z228 C2R3Z229 C2REDFLL C2RIMENU C2RNIDKE
  C2RNIDKJ C2RP3EC1 C2RT3EC1 C2RT3SMA C2RT3SND C2RT3SNE C2RT3SNF
  C2RT3SNG C2RT3SNH C2RT3SNI C2RT3SNJ C2RT3SNK C2RT3SNL C2RT3SNM
  C2RT3SNN CKA$INDX CKACICS  CKADB2   CKADFCSF CKADFDDA CKADFDIC
  CKADFDOT CKADQCF  CKADRKCF CKADRSEN CKADSCSM CKADSIP  CKAFDEFA
  CKAGC282 CKAGSENS CKAINPEV CKAINPH  CKALQCF  CKALSIP  CKANJE
  CKAOUCF  CKAOUCMP CKAOUCN  CKAOUDSN CKAOUIS  CKAOUMNT CKAOUNIX
  CKAOURES CKAOUSEN CKAOUSMF CKAOUTRU CKAOUVTA CKARCMD  CKARELS
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R230 PSY UA96148

     UP18/05/16 P F805

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.