|
When you run a KGUP job, you must specify the KGUP data sets for
the program to use in its processing.
- To access the panels to specify KGUP data sets, select option
2 on the Key Administration panel, as shown in Figure 157,
and press ENTER.
Figure 157. Selecting the Specify Data Set Option on the Key Administration Panel
CSFSAM00 ----------------- ICSF - Key Administration ---------------
OPTION ===> 2
Enter the number of the desired option.
1 Create - Create key generator control statements
2 Data Set - Specify data sets for processing
3 Submit - Invoke Key Generator Utility Program (KGUP)
4 Refresh - Activate an existing cryptographic key data set
Press ENTER to go to the selected option
Press END to exit to the previous panel
The Specify KGUP Data Sets panel appears. See Figure 158.
Figure 158. Specify KGUP Data Sets Panel
CSFSAE20 ---------------- ICSF - Specify KGUP Data Sets ------------
COMMAND ===> _
Enter data set names for all cryptographic files.
Cryptographic Key (DDNAME = CSFCKDS)
Data Set Name ===> ____________________________________________
Control Statement Input (DDNAME = CSFIN)
Data Set Name ===> ____________________________________________
Volume Serial ===> ______ (if uncataloged)
Diagnostics (DDNAME = CSFDIAG) (use * for printer)
Data Set Name ===> ____________________________________________
Volume Serial ===> ______ (if uncataloged)
Key Output (DDNAME = CSFKEYS)
Data Set Name ===> ____________________________________________
Volume Serial ===> ______ (if uncataloged)
Control Statement Output (DDNAME = CSFSTMNT)
Data Set Name ===> ____________________________________________
Volume Serial ===> ______ (if uncataloged)
Press ENTER to set the data set names. Press END to exit to the previous panel.
This panel contains all the data sets that KGUP uses for
input or output during processing. In the Data Set Name field under
each type of data set, you specify the name of the data set for KGUP
to use.
- In the Cryptographic Key Data Set Name field, specify the name
of the CKDS which contains the key entries that KGUP processes.
You
must initialize the CKDS by using the method that is described in Initializing the CKDS and PKDS at First-Time Startup. The data set can be any disk copy of a CKDS that
is enciphered under the current master key.
- In the Control Statement Input Data Set Name field, specify the
name of the data set that contains the control statements you want
KGUP to process for this job.
- In the Volume Serial field, enter the volume serial for the data
set if it is not cataloged.
If you specified a control statement
input data set on the KGUP Control Statement Data Set Specification
panel, the data set name appears in the Control Statement Input Data
Set Name field on this panel. If you change the data set name on this
panel, it automatically changes on the KGUP Control Statement Data
Set Specification panel. Refer to Figure 136 for an example
of the KGUP Control Statement Data Set Specification panel.
- In the Diagnostics Data Set Name field,
specify the name of the data set where KGUP places the image of the
control statements and any diagnostic KGUP generates.
You do not
have to allocate this data set when you specify the data set in this
field. If the data set does not already exist, then a job control
language statement that allocates the data set can be used when you
submit the job.
- In the Volume Serial field, enter the volume serial for the data
set if the data set already exists but is not cataloged.
If you
enter an * in the Diagnostics Data Set Name field, the information
is printed directly to a printer instead of a data set.
- In the Key Output Data Set Name field,
specify the name of the data set that contains key values that are
generated to use to create complementary key values.
You do not
have to allocate this data set when you specify the data set in this
field. If the data set does not already exist, then a job control
language statement that allocates the data set can be used when you
submit the job.
- In the Volume Serial field, enter the volume serial for the data
set if the data set already exists but is not cataloged.
- In the Control Statement Output Data Set Name field, specify
the name of the data set that contains control statements generated
to use to create complementary key values.
You do not have to allocate
this data set when you specify the data set in this field. If the
data set does not already exist, then a job control language statement
that allocates the data set can be used when you submit the job.
- In the Volume Serial field, enter the volume serial for the data
set if the data set already exists but is not cataloged.
For a
more complete description of each of the data sets, see Specifying KGUP data sets.
The
data sets that you name appear on this panel the next time you access
it.
An example of a Specify KGUP Data Sets panel with the names
of data sets specified for KGUP processing is shown in Figure 159.
Figure 159. Completing the Specify KGUP Data Sets Panel
CSFSAE20 ---------------- ICSF - Specify KGUP Data Sets ------------
COMMAND ===> _
Enter data set names for all cryptographic files.
Cryptographic Key (DDNAME = CSFCKDS)
Data Set Name ===> TEST.CSFCKDS________________________________
Control Statement Input (DDNAME = CSFIN)
Data Set Name ===> CSFIN.TESTDS1P(TEST)________________________
Volume Serial ===> ______ (if uncataloged)
Diagnostics (DDNAME = CSFDIAG) (use * for printer)
Data Set Name ===> *___________________________________________
Volume Serial ===> ______ (if uncataloged)
Key Output (DDNAME = CSFKEYS)
Data Set Name ===> TEST.CSFKEYS________________________________
Volume Serial ===> ______ (if uncataloged)
Control Statement Output (DDNAME = CSFSTMNT)
Data Set Name ===> TEST.CSFSTMNT_______________________________
Volume Serial ===> ______ (if uncataloged)
Press ENTER to set the data set names. Press END to exit to the previous panel.
- Press ENTER to set the data set names.
- Press END to return to the ICSF Key Administration panel.
|
z/OS Cryptographic Services ICSF Administrator's Guide
Copyright IBM Corporation 1990, 2014