BRMS Media Security

BRMS monitors and protects media operations in the following ways:

BRMS provides media protection against overwriting by checking the media inventory before using a tape. This ensures that the volume is available for use in the media scratch pool. If the volume is unavailable, BRMS rejects it, and sends a message that suggests an available volume.
Media output to each function requires that the media be of the correct class. If it is not, BRMS rejects it, logs the attempted use, and sends a message suggesting an available volume.

Note:

BRMS performs no media inventory checking if you use the i5/OS Save Storage (SAVSTG) command to back up your system. BRMS does not log this usage. Therefore, IBM® recommends that you secure the SAVSTG command and that you use volumes that are not managed by BRMS for SAVSTG operations.

At the Secure media parameter on the media policy, you can specify whether to apply volume security to volumes in a selected media class. If your media policy specifies a TSM server, then you must also specify *ADSM at the Secure media prompt. If you specify *ADSM at the Secure media prompt, then you must also specify *ADSM at the media class and move policy prompts. You can find more information on TSM in BRMS and Tivoli Storage Manager (TSM).

Note:

Only users with *ALLOBJ or *SAVSYS authority can read a secured volume. BRMS logs any unauthorized attempts, and denies read access. To use the secure option, you also need *ALLOBJ or *SAVSYS authority. You can secure media by changing the value in the Secure Media field on the media policy that you want to use for this backup to *YES.

To prevent the accidental initialization of media, set the INZMEDBRM command to CHECK(*YES). This way, BRMS will not initialize media that contains active files. You cannot use the i5/OS INZTAP command to initialize BRMS media unless you have the appropriate user authority.

You can use the Remove Media Volumes from BRM (RMVMEDBRM) command to secure the process of removing media and media information. You can also use the Remove Media Info from BRM (RMVMEDIBRM) command. BRMS processes commands that contain the 4=Remove option (for media or media information) through the RMVMEDBRM and RMVMEDIBRM commands. For example, BRMS uses the RMVMEDBRM command to process remove requests from the Work with Media (WRKMEDBRM) command. You can process any command that allows the removal of media information, such as WRKMEDIBRM, WRKSPLFBRM, WRKOBJBRM, WRKLIBBRM, through the RMVMEDIBRM command.

[ Top of Page | Previous Page | Next Page | Contents | Index ]