Re: Encryptions

[DrFranken <midrange@xxxxxxxxxxxx>]

In such a case there are still multiple options.

First off, and likely best, is to encrypt the data at the SAN level. 
This then means the workload of encrypting/decrypting is done by the SAN 
not by IBM i. However the data flying between IBM i and the SAN (likely 
over Fiber) is not encrypted in this configuration.

Second option is to install the ASP encryption option. Here you would be 
encrypting the data using IBM i before it departs the physical system 
and heads to the SAN. You would however need to move all your data into 
an iASP for this to be effective.  This is simpler for the vendor unless 
they already have the SAN data encrypted.

        - Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 12/1/2017 3:34 PM, Denis Robitaille wrote:
> AS/400, iSeries, IBM i. I know that they are not the same thing but I tend to use them interchangeably.
>
> To be clearer, we are at V7R2.
>
> I am inquirering  about option A, data at rest.
>
> Thanks
>
> -----Message d'origine-----
> De : DrFranken [mailto:midrange@xxxxxxxxxxxx]
> Envoyé : 1 décembre 2017 15:30
> À : Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>; Denis Robitaille <denis_robitaille@xxxxxxxxxxxx>
> Objet : Re: Encryptions
>
> iSeries does not, IBM i, however, has encryption options.
>
> Are you looking to encrypt:
>
> A) Just data at rest, that is if someone stole the hard drives the data would be encrypted?
>
> B) Data in certain columns, that is field such as SSN or other sensitive data.
>
> C) Data in flight between IBM i and users or other servers, that is network communication.
>
> D) Some combination of the above. Each has advantages and weaknesses and there are different ways to accomplish them as well.
>
>           - Larry "DrFranken" Bolhuis
>
> www.Frankeni.com
> www.iDevCloud.com - Personal Development IBM i timeshare service.
> www.iInTheCloud.com - Commercial IBM i Cloud Hosting.
>
> On 12/1/2017 3:17 PM, Denis Robitaille wrote:
> > Hello all,
> >
> > We are in the process of moving our Iseries workload to a cloud hosted solution. Our security folks wants the system in the cloud to be fully encrypted once over there.
> >
> > I think that the Iseres support full encryption but could someone point me in the direction of redbook, white paper ...
> >
> > Also, as anyone done this before? If so any advice gotcha ...
> >
> > Thanks
> >
> > [cid:image001.jpg@01D1F7D9.2487F9B0]<http://www.cascades.com/_home>
> >
> > Denis Robitaille
> > Chef de service TI - Solution d'entreprise Infrastructure et
> > opérations
> >
> > CASCADES CENTRE DES TECHNOLOGIES
> > 412 Marie Victorin
> > Kingsey falls(Québec) Canada J0A 1B0
> > Tél :  819 363 6100  Poste :52130
> > Cell : 819 352 9362