FDRCRYPT™, an extra-cost add-on product to FDR and FDRABR, provides encryption for FDR,
FDRDSF and ABR full-volume, archive, application and data set backups. FDRCRYPT will protect the data
on your backups against unauthorized access by anyone who does not possess the proper encryption keys.
FDRCRYPT offers different levels of encryption, invoked with new operands on the DUMP statement.
When you are creating duplicate backups (with TAPEx and TAPExx DD statements), you can encrypt
COPY1, COPY2 or both, which gives you the option of retaining an unencrypted copy for onsite recovery.
FDRCAMS Encrypting Sequential Files
and VSAM
FDRCRYPT also includes FDRCAMS, an encryption utility that invokes IBM’s IDCAMS to encrypt
the sequential output from a REPRO command. This allows sequential copies of any dataset supported
by REPRO (VSAM, Sequential, and IAM) to be encrypted, and also the automatic decryption of any
sequential file used as input to REPRO. FDRCAMS secures data so it can be safely sent to other
companies or agencies, and prevents the problems caused by loss or theft of the transfer media
(which can be tape, or via email, FTP, or on CD). If the receiving site does not have FDRCRYPT,
a no-charge program called FDRDECRY can be downloaded to decrypt
the file. |
|
Most Electronic Data Must be Protected by One or More of These Regulations:
FDRCRYPT will help you maintain compliance.
• HIPAA • PCI DSS
• GLBA • SOX 802
• ISO 17799 Int'l IT security
• European Union Data Protection |
|
 |
FDRCRYPT provides encryption for full volume, incremental, archive, application
and data set backups. FDRCAMS provides encryption for VSAM, Sequential and IAM datasets. |
FDRCRYPT is independent of the Hardware
All encryption algorithms are implemented in FDRCRYPT software and do not require any
encryption hardware or assist feature to be available
in the processor. Support for TDES,
AES-128, 192
and 256.
However, if such features are installed, FDRCRYPT will automatically use them for encryption and/or
decryption. These are the AES-128 hardware assist available in IBM z9 processors and the TDES hardware
assist in z890, z990, and z9 processors. Data can be encrypted using the hardware feature and later
decrypted using the software implementation, and vice-versa. This insures that your data can be decrypted
at any receiving or disaster site with any processor type and any operating system.
FDRCRYPT is subject to USA export controls.
|
