Ibm System I Security Protecting I5 Os Data With Encryption

Author : Yessong Johng,Beth Hagemeister,John Concini,Milan Kalabis,Robin Tatam,IBM Redbooks
Publisher : IBM Redbooks
Page : 308 pages
File Size : 51,6 Mb
Release : 2008-07-24
Category : Computers
ISBN : 9780738485379

Get Book

IBM System i Security: Protecting i5/OS Data with Encryption by Yessong Johng,Beth Hagemeister,John Concini,Milan Kalabis,Robin Tatam,IBM Redbooks Pdf

Regulatory and industry-specific requirements, such as SOX, Visa PCI, HIPAA, and so on, require that sensitive data must be stored securely and protected against unauthorized access or modifications. Several of the requirements state that data must be encrypted. IBM® i5/OS® offers several options that allow customers to encrypt data in the database tables. However, encryption is not a trivial task. Careful planning is essential for successful implementation of data encryption project. In the worst case, you would not be able to retrieve clear text information from encrypted data. This IBM Redbooks® publication is designed to help planners, implementers, and programmers by providing three key pieces of information: Part 1, "Introduction to data encryption" on page 1, introduces key concepts, terminology, algorithms, and key management. Understanding these is important to follow the rest of the book. If you are already familiar with the general concepts of cryptography and the data encryption aspect of it, you may skip this part. Part 2, "Planning for data encryption" on page 37, provides critical information for planning a data encryption project on i5/OS. Part 3, "Implementation of data encryption" on page 113, provides various implementation scenarios with a step-by-step guide.

Author : Jim Cook,Juan Carlos Cantalupo,MinHoon Lee,IBM Redbooks
Publisher : IBM Redbooks
Page : 426 pages
File Size : 46,6 Mb
Release : 2009-05-29
Category : Computers
ISBN : 9780738432861

Get Book

Security Guide for IBM i V6.1 by Jim Cook,Juan Carlos Cantalupo,MinHoon Lee,IBM Redbooks Pdf

The IBM® i operation system (formerly IBM i5/OS®) is considered one of the most secure systems in the industry. From the beginning, security was designed as an integral part of the system. The System i® platform provides a rich set of security features and services that pertain to the goals of authentication, authorization, integrity, confidentiality, and auditing. However, if an IBM Client does not know that a service, such as a virtual private network (VPN) or hardware cryptographic support, exists on the system, it will not use it. In addition, there are more and more security auditors and consultants who are in charge of implementing corporate security policies in an organization. In many cases, they are not familiar with the IBM i operating system, but must understand the security services that are available. This IBM Redbooks® publication guides you through the broad range of native security features that are available within IBM i Version and release level 6.1. This book is intended for security auditors and consultants, IBM System Specialists, Business Partners, and clients to help you answer first-level questions concerning the security features that are available under IBM. The focus in this publication is the integration of IBM 6.1 enhancements into the range of security facilities available within IBM i up through Version release level 6.1. IBM i 6.1 security enhancements include: - Extended IBM i password rules and closer affinity between normal user IBM i operating system user profiles and IBM service tools user profiles - Encrypted disk data within a user Auxiliary Storage Pool (ASP) - Tape data save and restore encryption under control of the Backup Recovery and Media Services for i5/OS (BRMS) product, 5761-BR1 - Networking security enhancements including additional control of Secure Sockets Layer (SSL) encryption rules and greatly expanded IP intrusion detection protection and actions. DB2® for i5/OS built-in column encryption expanded to include support of the Advanced Encryption Standard (AES) encryption algorithm to the already available Rivest Cipher 2 (RC2) and Triple DES (Data Encryption Standard) (TDES) encryption algorithms. The IBM i V5R4 level IBM Redbooks publication IBM System i Security Guide for IBM i5/OS Version 5 Release 4, SG24-6668, remains available.

Author : Jim Cook,Ahmed Mansour,Giancarlo Omati,Ana Flavia Pavan,Mark Roy,IBM Redbooks
Publisher : IBM Redbooks
Page : 518 pages
File Size : 46,8 Mb
Release : 2009-12-16
Category : Computers
ISBN : 9780738433608

Get Book

IBM i 6.1 Technical Overview by Jim Cook,Ahmed Mansour,Giancarlo Omati,Ana Flavia Pavan,Mark Roy,IBM Redbooks Pdf

This IBM® Redbooks® publication introduces a technical overview of the main new features, functions and enhancements available in IBM i 6.1 (formerly called i5/OS® V6R1). It gives a summary and brief explanation of new capabilities and what has changed in the operating system, and also discusses many of the licensed programs and application development tools associated with IBM i. Many other new and enhanced functions are described, such as virtualization of storage, security, JavaTM performance, improved performance with IBM System StorageTM devices, backup and recovery, including base IBM i, Backup, Recovery and Media Services (BRMS). The book introduces the PowerHATM product, IBM Systems Director-based system management and an easier Web enablement. The information provided in this book will be useful for customers, Business Partners, and IBM service professionals involved with planning, supporting, upgrading, and implementing IBM i 6.1 solutions.

Author : Justin C. Haase,Dwight Harrison,Adam Lukaszewicz,David Painter,Tracy Schramm,Jiri Sochr,IBM Redbooks
Publisher : IBM Redbooks
Page : 952 pages
File Size : 46,7 Mb
Release : 2015-10-29
Category : Computers
ISBN : 9780738440118

Get Book

IBM i 7.1 Technical Overview with Technology Refresh Updates by Justin C. Haase,Dwight Harrison,Adam Lukaszewicz,David Painter,Tracy Schramm,Jiri Sochr,IBM Redbooks Pdf

This IBM® Redbooks® publication provides a technical overview of the features, functions, and enhancements available in IBM i 7.1, including all the Technology Refresh (TR) levels from TR1 to TR7. It provides a summary and brief explanation of the many capabilities and functions in the operating system. It also describes many of the licensed programs and application development tools that are associated with IBM i. The information provided in this book is useful for clients, IBM Business Partners, and IBM service professionals who are involved with planning, supporting, upgrading, and implementing IBM i 7.1 solutions.

Author : Bill White,Cecilia Carranza Lewis,Eysha Shirrine Powers,David Rossi,Eric Rossman,Andy Coulsonr,Jacky Doll,Brad Habbershow,Thomas Liu,Ryan McCarry,Philippe Richard,Romoaldo Santos,Isabel Arnold,Kasper Lindberg,IBM Redbooks
Publisher : IBM Redbooks
Page : 274 pages
File Size : 53,9 Mb
Release : 2021-12-10
Category : Computers
ISBN : 9780738460222

Get Book

Getting Started with z/OS Data Set Encryption by Bill White,Cecilia Carranza Lewis,Eysha Shirrine Powers,David Rossi,Eric Rossman,Andy Coulsonr,Jacky Doll,Brad Habbershow,Thomas Liu,Ryan McCarry,Philippe Richard,Romoaldo Santos,Isabel Arnold,Kasper Lindberg,IBM Redbooks Pdf

This IBM® Redpaper Redbooks® publication provides a broad explanation of data protection through encryption and IBM Z® pervasive encryption with a focus on IBM z/OS® data set encryption. It describes how the various hardware and software components interact in a z/OS data set encryption environment. In addition, this book concentrates on the planning and preparing of the environment and offers implementation, configuration, and operational examples that can be used in z/OS data set encryption environments. This publication is intended for IT architects, system programmer, and security administrators who plan for, deploy, and manage security on the Z platform. The reader is expected to have a basic understanding of IBM Z security concepts.

Author : Alex Osuna,Luciano Cecchetti,Edgar Vinson,IBM Redbooks
Publisher : IBM Redbooks
Page : 232 pages
File Size : 42,9 Mb
Release : 2010-12-08
Category : Computers
ISBN : 9780738434803

Get Book

IBM System Storage Open Systems Tape Encryption Solutions by Alex Osuna,Luciano Cecchetti,Edgar Vinson,IBM Redbooks Pdf

This IBM® Redbooks® publication discusses IBM System Storage Open Systems Tape Encryption solutions. It specifically describes Tivoli Key Lifecycle Manager (TKLM) Version 2, which is a Java software program that manages keys enterprise-wide and provides encryption-enabled tape drives with keys for encryption and decryption. The book explains various methods of managing IBM tape encryption. These methods differ in where the encryption policies reside, where key management is performed, whether a key manager is required, and if required, how the tape drives communicate with it. The security and accessibility characteristics of encrypted data create considerations for clients which do not exist with storage devices that do not encrypt data. Encryption key material must be kept secure from disclosure or use by any agent that does not have authority to it; at the same time it must be accessible to any agent that has both the authority and need to use it at the time of need. This book is written for readers who need to understand and use the various methods of managing IBM tape encryption.

Author : Bill White (Telecommunications engineer)
Publisher : Unknown
Page : 128 pages
File Size : 46,8 Mb
Release : 2018
Category : Computer security
ISBN : OCLC:1043906474

Get Book

Getting Started with Z/OS Data Set Encryption by Bill White (Telecommunications engineer) Pdf

Author : Anshari, Muhammad,Almunawar, Mohamad Nabil,Masri, Masairol
Publisher : IGI Global
Page : 269 pages
File Size : 42,6 Mb
Release : 2021-11-26
Category : Business & Economics
ISBN : 9781799884491

Get Book

FinTech Development for Financial Inclusiveness by Anshari, Muhammad,Almunawar, Mohamad Nabil,Masri, Masairol Pdf

Financial technology (FinTech) and its related products are considered a major disruptive innovation in financial services, substantially elevating financial solutions and new business models. Resulting from the fusion of finance and smart mobile technology, this innovative technology requires additional investigation into its adoption, challenges, opportunities, and future directions so that we may understand and develop the technology to its full potential. FinTech Development for Financial Inclusiveness moves beyond the theoretical areas of FinTech to comprehensively explore the recent FinTech initiative scenarios with respect to processes, strategies, challenges, lessons learned, and outcomes within economic development as well as trade and investment. Covering a range of topics such as decentralized finance and global electronic commerce, it is ideal for industry professionals, business owners, consultants, practitioners, instructors, researchers, academicians, and students.

Author : Alex Osuna
Publisher : Unknown
Page : 1008 pages
File Size : 50,7 Mb
Release : 2010
Category : Data encryption
ISBN : 0738434302

Get Book

IBM System Storage Data Encryption by Alex Osuna Pdf

Author : Bert Dufrasne,Dietmar Dausner,Roger Eriksson,Roman Fridli,Itzhack Goldberg,Markus Oscheka,Stephen Solewin,IBM Redbooks
Publisher : IBM Redbooks
Page : 74 pages
File Size : 43,9 Mb
Release : 2014-08-11
Category : Computers
ISBN : 9780738453552

Get Book

IBM XIV Security with Data-at-Rest Encryption by Bert Dufrasne,Dietmar Dausner,Roger Eriksson,Roman Fridli,Itzhack Goldberg,Markus Oscheka,Stephen Solewin,IBM Redbooks Pdf

With the ever-growing landscape of national, state, and local regulations, industry requirements, and increased security threats, ensuring the protection of an organization's information is a key part of operating a successful business. Encrypting "data at rest" is a key element when addressing these concerns. Most storage products offer encryption at an additional cost. As with all of its features, the IBM® XIV® Storage System provides data-at-rest encryption at no charge. This gives clients the opportunity to take advantage of encryption and still enjoy the lower total cost of ownership that XIV offers. This IBM RedpaperTM publication explains the architecture and design of the XIV encryption solution and how it must be configured and implemented. It can help clients and Storage Administrators who want to enable data encryption on XIV storage systems.

Author : Felipe Knop,Sandeep R. Patil,Alifiya Kantawala,Larry Coyne,IBM Redbooks
Publisher : IBM Redbooks
Page : 116 pages
File Size : 40,5 Mb
Release : 2018-09-18
Category : Computers
ISBN : 9780738457161

Get Book

IBM Spectrum Scale Security by Felipe Knop,Sandeep R. Patil,Alifiya Kantawala,Larry Coyne,IBM Redbooks Pdf

Storage systems must provide reliable and convenient data access to all authorized users while simultaneously preventing threats coming from outside or even inside the enterprise. Security threats come in many forms, from unauthorized access to data, data tampering, denial of service, and obtaining privileged access to systems. According to the Storage Network Industry Association (SNIA), data security in the context of storage systems is responsible for safeguarding the data against theft, prevention of unauthorized disclosure of data, prevention of data tampering, and accidental corruption. This process ensures accountability, authenticity, business continuity, and regulatory compliance. Security for storage systems can be classified as follows: Data storage (data at rest, which includes data durability and immutability) Access to data Movement of data (data in flight) Management of data IBM® Spectrum Scale is a software-defined storage system for high performance, large-scale workloads on-premises or in the cloud. IBM SpectrumTM Scale addresses all four aspects of security by securing data at rest (protecting data at rest with snapshots, and backups and immutability features) and securing data in flight (providing secure management of data, and secure access to data by using authentication and authorization across multiple supported access protocols). These protocols include POSIX, NFS, SMB, Hadoop, and Object (REST). For automated data management, it is equipped with powerful information lifecycle management (ILM) tools that can help administer unstructured data by providing the correct security for the correct data. This IBM RedpaperTM publication details the various aspects of security in IBM Spectrum ScaleTM, including the following items: Security of data in transit Security of data at rest Authentication Authorization Hadoop security Immutability Secure administration Audit logging Security for transparent cloud tiering (TCT) Security for OpenStack drivers Unless stated otherwise, the functions that are mentioned in this paper are available in IBM Spectrum Scale V4.2.1 or later releases.

Author : Deb Landon
Publisher : Vervante
Page : 420 pages
File Size : 47,5 Mb
Release : 2006
Category : Computers
ISBN : 0738496863

Get Book

IBM System i Security Guide by Deb Landon Pdf

Author : Lydia Parziale,IBM Redbooks
Publisher : IBM Redbooks
Page : 36 pages
File Size : 44,6 Mb
Release : 2018-01-03
Category : Computers
ISBN : 9780738456553

Get Book

Leveraging Integrated Cryptographic Service Facility by Lydia Parziale,IBM Redbooks Pdf

Integrated Cryptographic Service Facility (ICSF) is a part of the IBM® z/OS® operating system that provides cryptographic functions for data security, data integrity, personal identification, digital signatures, and the management of cryptographic keys. Together with the cryptography features of the IBM Z family, it provides secure, high-performance cryptographic functions (such as the loading of master key values) that enable the hardware features to be used by applications. This IBM RedpaperTM publication briefly describes ICSF and the key elements of z/OS that address different security needs. The audience for this publication is cryptographic administrators and security administrators, and those in charge of auditing security in an organization.

Author : Paola Bari,Helio Almeida,Gary Detro,David Druker,Marian Gasparovic,Manfred Gnirss,Jean Francois Jiguet,IBM Redbooks
Publisher : IBM Redbooks
Page : 348 pages
File Size : 49,5 Mb
Release : 2007-12-05
Category : Computers
ISBN : 9780738488547

Get Book

Security on z/VM by Paola Bari,Helio Almeida,Gary Detro,David Druker,Marian Gasparovic,Manfred Gnirss,Jean Francois Jiguet,IBM Redbooks Pdf

Discussions about server sprawl, rising software costs, going green, or moving data centers to reduce the cost of business are held in many meetings or conference calls in many organizations throughout the world. And many organizations are starting to turn toward System zTM and z/VM® after such discussions. The virtual machine operating system has over 40 years of experience as a hosting platform for servers, from the days of VM/SP, VM/XA, VM/ESA® and especially now with z/VM. With the consolidation of servers and conservative estimates that approximately seventy percent of all critical corporate data reside on System z, we find ourselves needing a highly secure environment for the support of this infrastructure. This document was written to assist z/VM support and security personnel in providing the enterprise with a safe, secure and manageable environment. This IBM® Redbooks® publication provides an overview of security and integrity provided by z/VM and the processes for the implementation and configuration of z/VM Security Server, z/VM LDAP Server, IBM Tivoli® Directory Server for z/OS®, and Linux® on System z with PAM for LDAP authentication. Sample scenarios with RACF® database sharing between z/VM and z/OS, or through Tivoli Directory Integrator to synchronize LDAP databases, are also discussed in this book. This book provides information about configuration and usage of Linux on System z with the System z Cryptographic features documenting their hardware and software configuration. The Consul zSecure Pro Suite is also part of this document: this product helps to control and audit security not only on one system, but can be used as a single point of enterprise wide security control. This document covers the installation and configuration of this product and detailed information is presented on how z/Consul can be used to collect and analyze z/VM security data and how it can be helpful in the administration of your audit data.

Author : Karan Singh,Rui Feio,Oerjan Lundgren,Bob McCormack,Rita Pleus,Paul Rogers,IBM Redbooks
Publisher : IBM Redbooks
Page : 286 pages
File Size : 49,5 Mb
Release : 2014-08-12
Category : Computers
ISBN : 9780738439808

Get Book

ABCs of IBM z/OS System Programming by Karan Singh,Rui Feio,Oerjan Lundgren,Bob McCormack,Rita Pleus,Paul Rogers,IBM Redbooks Pdf

The ABCs of IBM® z/OS® System Programming is an 11-volume collection that provides an introduction to the z/OS operating system and the hardware architecture. Whether you are a beginner or an experienced system programmer, the ABCs collection provides the information that you need to start your research into z/OS and related subjects. If you want to become more familiar with z/OS in your current environment or if you are evaluating platforms to consolidate your e-business applications, the ABCs collection can serve as a powerful technical tool. Following are the contents of the volumes: Volume 1: Introduction to z/OS and storage concepts, TSO/E, ISPF, JCL, SDSF, and z/OS delivery and installation Volume 2: z/OS implementation and daily maintenance, defining subsystems, JES2 and JES3, LPA, LNKLST, authorized libraries, IBM Language Environment®, and SMP/E Volume 3: Introduction to DFSMS, data set basics, storage management hardware and software, VSAM, System-managed storage, catalogs, and DFSMStvs Volume 4: Communication Server, TCP/IP, and IBM VTAM® Volume 5: Base and IBM Parallel Sysplex®, System Logger, Resource Recovery Services (RRS), global resource serialization (GRS), z/OS system operations, automatic restart management (ARM), and IBM Geographically Dispersed Parallel SysplexTM (IBM GDPS®) Volume 6: Introduction to security, IBM RACF®, digital certificates and public key infrastructure (PKI), Kerberos, cryptography and IBM z9® integrated cryptography, Lightweight Directory Access Protocol (LDAP), and Enterprise Identity Mapping (EIM) Volume 7: Printing in a z/OS environment, Infoprint Server, and Infoprint Central Volume 8: An introduction to z/OS problem diagnosis Volume 9: z/OS UNIX System Services Volume 10: Introduction to IBM z/Architecture®, IBM System z® processor design, System z connectivity, logical partition (LPAR) concepts, hardware configuration definition (HCD), and Hardware Management Console (HMC) Volume 11: Capacity planning, performance management, Workload Manager (WLM), IBM Resource Measurement FacilityTM (RMFTM), and System Management Facilities (SMF)