Dump tape security considerations

Tape security options are the same for dump tapes, backup tapes, and migration tapes; however, there are some differences in implementation because DFSMShsm does not actually write on the dump tapes.

Restrictions for changing the tape-security options apply to dump-tape processing, except that the same security options that were in effect at the start of a dump operation remain in effect for the duration of the dump operation, even though the options can be changed with the SETSYS command at any time. This restriction is because dump processing marks any partially filled tapes as full; they are never selected for additional dump output. See Table 1 for a list of options and SETSYS command attributes.

Dump tapes have no restriction (unlike backup and migration tapes) about placing password-protected data sets on non-password-protected tapes.

Attention: Dump tapes that are password protected by DFSMShsm cannot be restored directly by DFSMSdss. Password-protected dump tapes must be write protected (ring removed or cartridge knob set) before they are mounted for restore processing.

Table 1. DFSMShsm Tape Security Options
Security Option	Commands	Description
RACF®	SETSYS TAPESECURITY (RACF)	DFSMShsm protects each backup, migration, and dump tape with RACF. DFSMShsm also protects alternate backup and migration tapes generated as a result of TAPECOPY processing. The RACF sub-parameter does not support backup or migration of password-protected data sets.
	SETSYS TAPESECURITY (RACFINCLUDE)	DFSMShsm protects each backup, migration, and dump tape and additionally backs up and migrates password-protected data sets to non-password-protected tapes. DFSMShsm also protects migration and backup tapes generated as a result of TAPECOPY processing.
RACF DATASET Class Protection	TAPESECURITY(EXPIRATION \| EXPIRATIONINCLUDE) or TAPESECURITY(PASSWORD)	DFSMShsm protects each backup, migration, dump and ABARS tape using a tape data set name profile.
Expiration Date Protection	SETSYS TAPESECURITY (EXPIRATION)	DFSMShsm protects each backup, migration, and dump tape with an expiration date. The EXPIRATION sub-parameter does not support backup or migration of password-protected data sets.
	SETSYS TAPESECURITY (EXPIRATIONINCLUDE)	DFSMShsm protects each backup, migration, and dump tape and additionally backs up and migrates password-protected data sets to non-password-protected tapes.
Password Protection	SETSYS TAPESECURITY (PASSWORD)	DFSMShsm protects each backup, migration, and dump tape with a password. Aggregate backup tapes cannot be password-protected.