Z/OS V14 March 2012. Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE,...
-
Upload
leon-johnston -
Category
Documents
-
view
215 -
download
1
Transcript of Z/OS V14 March 2012. Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE,...
z/OS V14z/OS V14March 2012March 2012
z/OS V14z/OS V14March 2012March 2012
Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc.
What’s Being Released? – z/OS
Release & Announce Date: 3/12/2012
PKZIP and SecureZIP for z/OS
SecureZIP Partner for z/OS
Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc.
What’s New in v14
Create and Extract OpenPGP Files
zIIP Support
Command Substitution
Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc.
OpenPGP Integration
Encrypt ZIP files using passphrase, x.509 digital certificates, and/or OpenPGP keys
Encrypt OpenPGP files using passphrase and/or OpenPGP keys
Sign ZIP files using x.509 digital certificates Sign OpenPGP files with OpenPGP keys Authenticate files signed with OpenPGP keys and
x.509 digital certificates
Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc.
OpenPGP Integration
Keys stored in file based pgp key rings• Supports OpenPGP Contingency keys
Integrated with SecureZIP ISPF interface New and modified commands Native z/OS implementation, exploits hardware
• CPACF high speed encryption and hashing Not FIPS 140 Compliant in OpenPGP mode
Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc.
Levels of OpenPGP Function
Edition OpenPGP Functionality*
PKZIP SE Create OpenPGP format filesNO encryption, NO decryption
PKZIP EE Decrypt OpenPGP passphrases
SecureZIP SE Encrypt & Decrypt OpenPGP passphrasesDecrypt using OpenPGP keys
SecureZIP EE Encrypt using OpenPGP Keys
*OpenPGP function is incremental
Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc.
SecureZIP Administration Panel
Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc.
Main ZIP Panel – Pop-up
“Archive File Format” pop-up has new value for PGPFILE format
Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc.
New OpenPGP Commands/ Controls
New Commands• -{PGPSET,attribute list}• -{PGPKEYRDEF=ring_handle;PUB|PVT;FILE;filename}
Modified Commands• -ARCHIVE_ZIPFORMAT=PGPFILE • -RECIPIENT(PGP:ring_handle[,CN=|EMAIL=|KEYID=|*ALL][,PASSWORD=])• -SIGN_ARCHIVE(PGP:ring_handle[,CN=|EMAIL=|KEYID=][,PASSWORD=])• -ENCRYPTION_METHOD=CAST5 • -AUTHCHK(ARCHIVE, PGP:ring_handle)
Security Server Resource Controls – New Values• ENCRYPTION_METHOD.CAST5• CRYPTO_KEYTYPE.RECIPIENT.PGPKEYS
Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc.
SecureZIP PartnerLink v14
Sponsor
Partner
Partner
PGPPartner
Partner
Partner
Partner
For the Partner that insists on OpenPGP files, they don’t need SecureZIP Partner, they already have a tool to decrypt OpenPGP files
Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc.
zIIP Specialty Engine Support
z Integrated Information Processor - zIIP• Initially for DB2 Workload, now sort, compression,
anything that can be scheduled in an enclave SRB• Optional, chargeable IBM System z feature• Offloads work from general CPs
Using zIIP’s can save customers money• zIIPs do not affect the MSU’s (MIPS) • Are less expensive than general processors
Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc.
V14 Adds Support for zIIP
PKZIP and SecureZIP – All Editions
–ZIIP_RUNOPTS(Y|N)• Controls whether qualified processing may be scheduled to
execute on an active zIIP
Using zIIP requires that PKZIP/SecureZIP be APF enabled, or activated through the PKWSVC.
Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc.
What does zIIP Support mean?
Work is MOVED from the general processor to the zIIP• Doesn’t make it run faster• Doesn’t use less total CPU• Task processing time offloaded to enclave CPU
For faster processing with less CPU• Consider using Hardware Compression feature
Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc.
Command Variable Substitution
Allows for command customization Permits use of template command sets Four types of substitutions
• Job related, e.g. Job name, Step name• System related, e.g. SMF id and LPAR id• Time/Date• User defined