× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.



In such a case there are still multiple options.

First off, and likely best, is to encrypt the data at the SAN level. This then means the workload of encrypting/decrypting is done by the SAN not by IBM i. However the data flying between IBM i and the SAN (likely over Fiber) is not encrypted in this configuration.

Second option is to install the ASP encryption option. Here you would be encrypting the data using IBM i before it departs the physical system and heads to the SAN. You would however need to move all your data into an iASP for this to be effective. This is simpler for the vendor unless they already have the SAN data encrypted.

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 12/1/2017 3:34 PM, Denis Robitaille wrote:
AS/400, iSeries, IBM i. I know that they are not the same thing but I tend to use them interchangeably.

To be clearer, we are at V7R2.

I am inquirering about option A, data at rest.

Thanks

-----Message d'origine-----
De : DrFranken [mailto:midrange@xxxxxxxxxxxx]
Envoyé : 1 décembre 2017 15:30
À : Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>; Denis Robitaille <denis_robitaille@xxxxxxxxxxxx>
Objet : Re: Encryptions

iSeries does not, IBM i, however, has encryption options.

Are you looking to encrypt:

A) Just data at rest, that is if someone stole the hard drives the data would be encrypted?

B) Data in certain columns, that is field such as SSN or other sensitive data.

C) Data in flight between IBM i and users or other servers, that is network communication.

D) Some combination of the above. Each has advantages and weaknesses and there are different ways to accomplish them as well.

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 12/1/2017 3:17 PM, Denis Robitaille wrote:
Hello all,

We are in the process of moving our Iseries workload to a cloud hosted solution. Our security folks wants the system in the cloud to be fully encrypted once over there.

I think that the Iseres support full encryption but could someone point me in the direction of redbook, white paper ...

Also, as anyone done this before? If so any advice gotcha ...

Thanks

[cid:image001.jpg@01D1F7D9.2487F9B0]<http://www.cascades.com/_home>

Denis Robitaille
Chef de service TI - Solution d'entreprise Infrastructure et
opérations

CASCADES CENTRE DES TECHNOLOGIES
412 Marie Victorin
Kingsey falls(Québec) Canada J0A 1B0
Tél : 819 363 6100 Poste :52130
Cell : 819 352 9362




As an Amazon Associate we earn from qualifying purchases.

This thread ...

Replies:

Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.