This IBM® Redbooks® publication provides a broad explanation of data protection through encryption and IBM Z® pervasive encryption with a focus on IBM z/OS® data set encryption. It describes how the various hardware and software components interact in a z/OS data set encryption environment.

In addition, this book concentrates on the planning and preparing of the environment and offers implementation, configuration, and operational examples that can be used in z/OS data set encryption environments.

This publication is intended for IT architects, system programmer, and security administrators who plan for, deploy, and manage security on the Z platform. The reader is expected to have a basic understanding of IBM Z security concepts.

This book was produced by a team of specialists from around the world working at IBM Redbooks, Poughkeepsie Center.

Bill White is an IBM Redbooks Project Leader and Senior Networking and Connectivity Specialist at IBM Redbooks, Poughkeepsie Center.

Andy Coulson works for IBM Security in Edinburgh, UK. Andy has worked at various mainframe customers, including an airline, banks, and an insurance company, since he started as an IBM MVS™ Systems Programmer in 1987. He has been with IBM for 12 years in several technical mainframe roles, including hardware and software support. Currently, he works in IBM Z Security pre-sales technical support.

Jacky Doll is a software engineer with the IBM Z business unit in Poughkeepsie. She has developed content for web projects, digital media, and user manuals that support z/OS and its products. Jacky is the team lead for Hot Topics magazine, and holds a Masters of Science in Human-computer Interaction from Renssalaer Polytechnic Institute (RPI) in Troy, New York.

Brad Habbershaw is an I/T Specialist at IBM Canada and the z/OS system programmer team lead for Infrastructure Services, Securities Industry Services for IBM Global Technology Services®, Canada. He has over 32 years of experience in the I/T field specializing in z/OS, IBM Parallel Sysplex®, IBM RACF®, JES3 and many other IBM products. Brad holds a B.Sc Degree from Western University in Ontario, Canada. He has written extensively on parallel sysplex operations, z/OS High Availability and JES3 - JES2 migration topics in his career at IBM.

Cecilia Carranza Lewis is a Senior Technical Staff Member (STSM) Software Engineer within IBM Z development, based at the Silicon Valley Laboratory (SVL) in San Jose, CA. Her focus is on strategy and architecture in the area of z/OS data and storage management within z/OS Data Facilities Storage Management Subsystem (DFSMS), where she has over 30 years of experience. Cecilia has held numerous technical leadership positions focused on supporting clients’ explosive data growth on IBM Z mainframes through improvements in total cost of ownership, simplification, and data security. She is also the architect for the z/OS data set encryption solution.

Thomas Liu is a z/OS Systems Programmer at Australia and New Zealand Banking Group Limited in Australia. He has 32 years of mainframe experience and holds a B.Sc from University of Melbourne in Victoria, Australia. His areas of expertise include z/OS installation, maintenance, and security.

Ryan McCarry is an IBM Z Client IT Specialist in IBM Systems who is based out of the Washington Systems Center in Herndon, VA. He joined IBM after obtaining a BS from Syracuse University in 2016. He also recently obtained the Systems z Associate Certificate from Marist College In Poughkeepsie, NY.

Eysha Shirrine Powers is a Cryptographic Software Designer and Developer with 14 years of experience with IBM Z cryptography and security. She joined IBM Poughkeepsie with a B.S. Computer Science from the University of Illinois at Urbana-Champaign and continued her education with a M.S. Information Technology from Rensselaer Polytechnic Institute. Eysha Shirrine has a passion for cryptography and has been designing and developing crypto software for z/OS Integrated Cryptographic Services Facility (ICSF) for over nine years. She also created and maintains the IBM Crypto Education online community and regularly presents at SHARE, IBMTechU, Vanguard, and other technical conferences.

Philippe Richard works for IBM LBS in Montpellier, France. He joined IBM France in 1985 to work in software support for MVS. Philippe has held several positions, including teaching, systems programming, consultancy and Pre-sales technical support for IBM Z. Philippe is now the WW lead developer of technical training and classes for IBM Z where he is in charge of the z/OS curriculum content including z/OS, RACF, Parallel Sysplex, UNIX System Services, IBM WebSphere®, and Liberty for z/OS. He has contributed to other IBM Redbooks publications projects, and is a regular speaker at IBM conferences in Europe (STG university, Security conference), and customers Guide/Share security meetings.

Romoaldo Santos is an IBM Z consultant in IBM Brazil. He has 37 years experience with the mainframe and is currently working on virtualization and data center platforms. Romoaldo is responsible for hardware configurations in IBM Global Accounts and supports GDPS® environments in EMEA and the US. He also works on high availability and business continuance projects. Other areas of expertise include Z I/O Supervisor, Assembler, Sysplex problem determination, performance and tuning, and z/OS internals.

Thanks to the following people for their contributions to this project:

Bob Haimowitz
LindaMay Patterson
IBM Redbooks Organization

Donald Ault
Eleanor Chan
Gayathiri Chandran
Chris DeRobertis
Carl Hovi
Michael Jordan
Kenneth Kerr
Arnaud Mante
Klaus Meissner
Mark Nelson
Bob Petti
Eric Rossman
Geoff Rousell
Barbara Sannerud
Nick Sardino
Timothy Sipples
Garry Sullivan
Peter Sutton
Helen Witter
IBM

Here’s an opportunity to spotlight your skills, grow your career, and become a published author—all at the same time! Join an ITSO residency project and help write a book in your area of expertise, while honing your experience using leading-edge technologies. Your efforts will help to increase product acceptance and customer satisfaction, as you expand your network of technical contacts and relationships. Residencies run from two to six weeks in length, and you can participate either in person or as a remote resident working from your home base.

Find out more about the residency program, browse the residency index, and apply online at:

Your comments are important to us!

We want our books to be as helpful as possible. Send us your comments about this book or other IBM Redbooks publications in one of the following ways:

IBM Corporation, International Technical Support Organization
Dept. HYTD Mail Station P099
2455 South Road
Poughkeepsie, NY 12601-5400