Re: encryption

I do not believe you can encrypt a USER ASP only iASPs. So that's the primary issue here.

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 11/21/2019 10:10 AM, Steinmetz, Paul via MIDRANGE-L wrote:

Larry,

Years back on my R&D LPAR, I had combination of spinny and SSD.
I needed a way to run the one of the test environments completely on the SSD.
I created a 2nd ASP, not a IASP, for all the SSD.
On the RSTLIBBRM command, I simply restored the required libraries to ASP02.
Auxiliary storage pool . . . . . RSTASP 02

I didn't have to change anything else, no jobds, etc.
Any job using that test environment ran fine, is ASP 02, all on SSD.

Would this method also apply to an ISAP?

I'm now 100% SSD across the board, ASP 02 no longer exists.
But the setup available if ever needed for other reasons.

Thanks
Paul




-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of DrFranken
Sent: Thursday, November 21, 2019 9:50 AM
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: encryption

Yes it can.

For programs and data this is rather straight forward. Once you have the iASP created (I'll refer to it as iASP33) then you move each library to iASP33. For ANY user or job that needs to access that data you will need to update job descriptions to have the Initial ASP Group set to IASP33.

For IFS objects the simplest is to move any IFS directories with user data from say '/YourIFSDir' to '/IASP33/YourIFSDir'. Then you would make a soft link of /YourIFSDIR pointing to /IASP33/YourIFSDir so that your applications don't even know the data was moved.

This is a bit of an oversimplification perhaps but covers the gist of it.

- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 11/21/2019 9:42 AM, iseriesstuff@xxxxxxxxx wrote:

DrFranken,

For clarity, can all my data be stored on the iASP keeping just OS on
the ASP? I'm assuming there would not be any changes needed program
wize to access the files that were stored on the ASP but now exist on the iASP?

-----Original Message-----
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
DrFranken
Sent: Tuesday, November 19, 2019 2:39 PM
To: Midrange Systems Technical Discussion
<midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: encryption

With IBM i you can encrypt iASPs at rest with an O/S feature. You
cannot encrypt the System ASP this way.

Using SAN Storage such as Storwize you can encrypt all the storage at rest.


- Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 11/19/2019 2:27 PM, iseriesstuff@xxxxxxxxx wrote:

We are working on compliance and I've been asked if the iseries drive
can be encrypted.


Can someone provide feedback on the best way of encrypting data on
the iseries? We have a power8 on 7.3.


Thanks.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at
https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link:
https://amazon.midrange.com

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com