Re: Encryptions

In such a case there are still multiple options.

First off, and likely best, is to encrypt the data at the SAN level. This then means the workload of encrypting/decrypting is done by the SAN not by IBM i. However the data flying between IBM i and the SAN (likely over Fiber) is not encrypted in this configuration.

Second option is to install the ASP encryption option. Here you would be encrypting the data using IBM i before it departs the physical system and heads to the SAN. You would however need to move all your data into an iASP for this to be effective. This is simpler for the vendor unless they already have the SAN data encrypted.

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 12/1/2017 3:34 PM, Denis Robitaille wrote:

AS/400, iSeries, IBM i. I know that they are not the same thing but I tend to use them interchangeably.

To be clearer, we are at V7R2.

I am inquirering about option A, data at rest.

Thanks

-----Message d'origine-----
De : DrFranken [mailto:midrange@xxxxxxxxxxxx]
Envoyé : 1 décembre 2017 15:30
À : Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxx>; Denis Robitaille <denis_robitaille@xxxxxxxxxxxx>
Objet : Re: Encryptions

iSeries does not, IBM i, however, has encryption options.

Are you looking to encrypt:

A) Just data at rest, that is if someone stole the hard drives the data would be encrypted?

B) Data in certain columns, that is field such as SSN or other sensitive data.

C) Data in flight between IBM i and users or other servers, that is network communication.

D) Some combination of the above. Each has advantages and weaknesses and there are different ways to accomplish them as well.

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 12/1/2017 3:17 PM, Denis Robitaille wrote:

Hello all,

We are in the process of moving our Iseries workload to a cloud hosted solution. Our security folks wants the system in the cloud to be fully encrypted once over there.

I think that the Iseres support full encryption but could someone point me in the direction of redbook, white paper ...

Also, as anyone done this before? If so any advice gotcha ...

Thanks

[cid:image001.jpg@01D1F7D9.2487F9B0]<http://www.cascades.com/_home>

Denis Robitaille
Chef de service TI - Solution d'entreprise Infrastructure et
opérations

CASCADES CENTRE DES TECHNOLOGIES
412 Marie Victorin
Kingsey falls(Québec) Canada J0A 1B0
Tél : 819 363 6100 Poste :52130
Cell : 819 352 9362