decription support DB2 v8 NFM

Arthur Robertson

decription support DB2 v8 NFM
Can I get AES data decryption support with DB2 v8 NFM running on z/OS as
a server? I think the answer is no, not until DB2 v9, correct? Under DB2 v8
NFM I maybe able to get AES credential decryption support if I have the
latest and greatest PTF's and ICSF properly installed, but I will have to settle
for DES data decryption until DB2 v9. Let me know. Many thanks in advance.

_____________________________________________________________________

* IDUG North America * Tampa, Florida, * May 10-14 2010 * http://IDUG.ORG/NA *
_____________________________________________________________________

http://www.IDUG.org membership is now free.
Do you have people in your office who are not an IDUG member?
Show them how to access the information and help train the next generation of DB2 Users!
_____________________________________________________________________

If you need to change settings, http://www.idug.org/cgi-bin/wa?A0=DB2-L is the home of IDUG's DB2-L

Robert Catterall

Re: decription support DB2 v8 NFM
(in response to Arthur Robertson)
My understanding, Arthur, is that AES *data* encryption and decryption
(versus AES *password and user ID *decryption for remotely originating
requests to a DB2 for z/OS server) is not built into DB2 for z/OS, whether
you're talking about DB2 V8 or V9. I believe that AES data encryption and
decryption in a DB2 subsystem depends on the use of an EDITPROC or a
FIELDPROC that utilizes the ICSF encrypt and decrypt data stored in a table.
You can write your own edit or field procedure to do this, or you can use a
tool to do that. The IBM Data Encryption for IMS and DB2 Databases tool can
be used to generate an EDITPROC that will use the ICSF to accomplish AES
encryption and decryption of data in a table. There may be other tools from
other vendors that can do something similar to this.

A couple of documents that you might want to check out for more information
are the IBM "red book" entitled "Securing and Auditing Data on DB2 for z/OS"
(http://www.redbooks.ibm.com/abstracts/sg247720.html?Open) and the IBM
Database Encryption for IMS and DB2 Databases tool User's Guide (
http://publib.boulder.ibm.com/epubs/pdf/decu1a13.pdf).

Robert


On Tue, Jan 5, 2010 at 5:27 PM, Arthur Lee Robertson <
[login to unmask email]> wrote:

> Can I get AES data decryption support with DB2 v8 NFM running on z/OS as
> a server? I think the answer is no, not until DB2 v9, correct? Under DB2
> v8
> NFM I maybe able to get AES credential decryption support if I have the
> latest and greatest PTF's and ICSF properly installed, but I will have to
> settle
> for DES data decryption until DB2 v9. Let me know. Many thanks in advance.
>
> _____________________________________________________________________
>
> * IDUG North America * Tampa, Florida, * May 10-14 2010 *
> http://IDUG.ORG/NA *
> _____________________________________________________________________
>
> http://www.IDUG.org membership is now free.
> Do you have people in your office who are not an IDUG member?
> Show them how to access the information and help train the next generation
> of DB2 Users!
> _____________________________________________________________________
>
> If you need to change settings, http://www.idug.org/cgi-bin/wa?A0=DB2-L is
> the home of IDUG's DB2-L
>



--
Robert Catterall
Catterall Consulting
www.catterallconsulting.com

_____________________________________________________________________

* IDUG North America * Tampa, Florida, * May 10-14 2010 * http://IDUG.ORG/NA *
_____________________________________________________________________

http://www.idug.org/db2-videos.html has hundreds of video presentations!
Did you miss out on attending an IDUG conference?
Many of the presentations were recorded and are available on our website!
_____________________________________________________________________

If you need to change settings, http://www.idug.org/cgi-bin/wa?A0=DB2-L is the home of IDUG's DB2-L