Re: encryption

[DrFranken <midrange@xxxxxxxxxxxx>]

I do not believe you can encrypt a USER ASP only iASPs. So that's the 
primary issue here.

	       - Larry "DrFranken" Bolhuis

www.Frankeni.com
www.iDevCloud.com - Personal Development IBM i timeshare service.
www.iInTheCloud.com - Commercial IBM i Cloud Hosting.

On 11/21/2019 10:10 AM, Steinmetz, Paul via MIDRANGE-L wrote:
> Larry,
>
> Years back on my R&D LPAR, I had combination of spinny and SSD.
> I needed a way to run the one of the test environments completely on the SSD.
> I created a 2nd ASP, not a IASP, for all the SSD.
> On the RSTLIBBRM command, I simply restored the required libraries to ASP02.
> Auxiliary storage pool . . . . . RSTASP         02
>
> I didn't have to change anything else, no jobds, etc.
> Any job using that test environment ran fine, is ASP 02, all on SSD.
>
> Would this method also apply to an ISAP?
>
> I'm now 100% SSD across the board, ASP 02 no longer exists.
> But the setup available if ever needed for other reasons.
>
> Thanks
> Paul
>
>
>
>
> -----Original Message-----
> From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of DrFranken
> Sent: Thursday, November 21, 2019 9:50 AM
> To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
> Subject: Re: encryption
>
> Yes it can.
>
> For programs and data this is rather straight forward. Once you have the iASP created (I'll refer to it as iASP33) then you move each library to iASP33. For ANY user or job that needs to access that data you will need to update job descriptions to have the Initial ASP Group set to IASP33.
>
> For IFS objects the simplest is to move any IFS directories with user data from say '/YourIFSDir' to '/IASP33/YourIFSDir'.  Then you would make a soft link of /YourIFSDIR pointing to /IASP33/YourIFSDir so that your applications don't even know the data was moved.
>
> This is a bit of an oversimplification perhaps but covers the gist of it.
>
>           - Larry "DrFranken" Bolhuis
>
> www.Frankeni.com
> www.iDevCloud.com - Personal Development IBM i timeshare service.
> www.iInTheCloud.com - Commercial IBM i Cloud Hosting.
>
> On 11/21/2019 9:42 AM, iseriesstuff@xxxxxxxxx wrote:
> > DrFranken,
> >
> > For clarity, can all my data be stored on the iASP keeping just OS on
> > the ASP? I'm assuming there would not be any changes needed program
> > wize to access the files that were stored on the ASP but now exist on the iASP?
> >
> > -----Original Message-----
> > From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of
> > DrFranken
> > Sent: Tuesday, November 19, 2019 2:39 PM
> > To: Midrange Systems Technical Discussion
> > <midrange-l@xxxxxxxxxxxxxxxxxx>
> > Subject: Re: encryption
> >
> > With IBM i you can encrypt iASPs at rest with an O/S feature. You
> > cannot encrypt the System ASP this way.
> >
> > Using SAN Storage such as Storwize you can encrypt all the storage at rest.
> >
> >
> >            - Larry "DrFranken" Bolhuis
> >
> > www.Frankeni.com
> > www.iDevCloud.com - Personal Development IBM i timeshare service.
> > www.iInTheCloud.com - Commercial IBM i Cloud Hosting.
> >
> > On 11/19/2019 2:27 PM, iseriesstuff@xxxxxxxxx wrote:
> > > We are working on compliance and I've been asked if the iseries drive
> > > can be encrypted.
> > >
> > >     
> > >
> > > Can someone provide feedback on the best way of encrypting data on
> > > the iseries? We have a power8 on 7.3.
> > >
> > >     
> > >
> > > Thanks.
> > --
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> > list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To
> > subscribe, unsubscribe, or change list options,
> > visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> > Before posting, please take a moment to review the archives at
> > https://archive.midrange.com/midrange-l.
> >
> > Please contact support@xxxxxxxxxxxx for any subscription related questions.
> >
> > Help support midrange.com by shopping at amazon.com with our affiliate link:
> > https://amazon.midrange.com
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxx for any subscription related questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate link: https://amazon.midrange.com