Encrypting data “at-rest” with Key Label for Db2 in z/OS

(7AG)

Stream: Virtual Room 7
Time: 09:00 - 10:00

Presentation

Encrypting data “at-rest” with Key Label for Db2 in z/OS.
Mainframes are well known for its reliability, availability & scalability. Security is still a major concern either it is mainframe or a distributed environment.
Data becomes the new perimeter of the enterprise and must be protected. No security solution can guarantee that a system is impenetrable and unable to be compromised. This is where taking the extra step of encrypting data comes into play.
One way to get this done is via a feature of your disk subsystem, if the disk subsystem that you use with Db2 for z/OS has that feature.
Another way to get this done is through the use of a z/OS feature called, simply, z/OS data set encryption. This z/OS capability can be used with Db2 11 or Db2 12 for z/OS, but it got quite a bit easier to use with Db2 12, at function level M502 or higher .With z/OS data set encryption, data is encrypted automatically when written to disk, and it is decrypted automatically when read from disk. z/OS data set encryption is enabled by associating an encryption key label with a data set.

Agenda:
. Basics of z/OS data set encryption.
. Introduction to KEY LABEL and its usage.
. Key label management for z/OS DFSMS data set encryption for Db2 12 for z/OS (Function Level 502 or higher).

Attachments

7AG Attachments

Speakers

Manik Kainth at Sponsor: Broadcom Mainframe Software

Manik Kainth is a software engineer at Broadcom. He has 5+ years of working experience in Mainframe Technology.He worked in HCL Technologies for a year as a Mainframe Storage Administrator(junior) and then moved to Broadcom, working as a developer for CA Log Analyzer(backup and recovery tool for IBM DB2).He holds Bachelor's Degree in Computer Science, specialization in Mainframe Technology from University of Petroleum & Energy Studies,India.