OA66305: NEW FUNCTION - RACF SUPPORT FOR DFSMS TAPE DATA SET ENCRYPTION GRANULARITY

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• NEW FUNCTION
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users who want to control granularity of     *
  *                 data set encryption at the level of the      *
  *                 RACF DATASET profile for tape, sequential    *
  *                 (basic and large format), and PDSE data      *
  *                 sets.                                        *
  ****************************************************************
  Encryption of PDSE and sequential
  (basic and large format) data sets
  is all or none.
  
  Tape data set encryption is not
  currently supported.
  

Problem conclusion

Temporary fix

Comments

• RACF adds a new ENCRYPTTYPES keyword to the DFP segment of the
  DATASET profile.  Within this field, policy can be
  established for each type of data set to either:
  - Include it in data set encryption
  - Exclude it from data set encryption
  - Defer to DFSMS for the decision
  
  This support will be exploited by DFSMS APAR OA66326 when it
  becomes available.  Monitor OA66326 for availability.
  
  The RACF database templates are updated. The new version
  string is:  OA66305 00000285.00000050
  
  There is no ISPF panel or TSO help support for the new DFP
  segment keyword.
  
  IBM.Function.DataSetEncryption
  
  The following RACF publications are updated.  For the specific
  topics that are updated, see the 'summary of changes' section
  for each of these publications.
  
  SA23-2293-xx z/OS Security Server RACF Callable Services
   - In Appendix B: Reference documentation tables, the Data set
     administration section is updated to add the ENCTYPES field
     to the DFP segment table.
  
  SA23-2292-xx z/OS Security Server RACF Command Language
                    Reference
   - The ENCRYPTTYPES keyword is added to the DFP segment in the
     ADDSD and ALTDSD commands.
  
  SA23-2288-xx z/OS Security Server RACF Macros and Interfaces
   - Appendix D: RACF database templates, is updated to add the
     ENCTYPES field to the DFP segment of the DATASET profile.
  
  SA23-2289-xx z/OS Security Server RACF Security Administrator's
                                         Guide
   - In Chapter 8: Protecting general resources, the 'Field-level
     access checking' topic is updated to add protection for the
     ENCRYPTTYPES keyword to the DFP segment in data set profiles.
  
  SA23-2294-xx z/OS Security Server RACROUTE Macro Reference
   - Appendix B: RACF database templates, is updated to add the
     ENCTYPES field to the DFP segment of the DATASET profile.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ96635 UJ96636

Modules/Macros

• IRRDBU03 IRRDPR22 IRRDPSDS IRRREQTB IRRTEMP2 IRRXTR01 RACDBULD
  RACDBUTB
  

Fix information

• Fixed component name

  RACF

• Fixed component ID

  5752XXH00

Applicable component levels

• R7D0 PSY UJ96635

     UP25/03/26 P F503  

• R7E0 PSY UJ96636

     UP25/03/26 P F503  

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.