Software encryption allows you to securely encrypt your data as it is being written to media. You can selectively choose which data you want encrypted or simply encrypt all of your user data. To use this function you need to have Cryptographic Service Provider (5770-SS1 Option 44) installed on the operating system. More details about how to set up encryption in BRMS are available in Software Encryption using BRMS. You are also encouraged to reference Cryptographic services key management to better understand key management. To locate the topic in IBM i Information Center, expand i5/OS information->Security->Cryptography.