IBM System Storage Open Systems Tape Encryption Solutions

IBM System Storage Open Systems Tape Encryption Solutions PDF

Author: Alex Osuna

Publisher: IBM Redbooks

Published: 2010-12-08

Total Pages: 232

ISBN-13: 0738434809

DOWNLOAD EBOOK →

This IBM® Redbooks® publication discusses IBM System Storage Open Systems Tape Encryption solutions. It specifically describes Tivoli Key Lifecycle Manager (TKLM) Version 2, which is a Java software program that manages keys enterprise-wide and provides encryption-enabled tape drives with keys for encryption and decryption. The book explains various methods of managing IBM tape encryption. These methods differ in where the encryption policies reside, where key management is performed, whether a key manager is required, and if required, how the tape drives communicate with it. The security and accessibility characteristics of encrypted data create considerations for clients which do not exist with storage devices that do not encrypt data. Encryption key material must be kept secure from disclosure or use by any agent that does not have authority to it; at the same time it must be accessible to any agent that has both the authority and need to use it at the time of need. This book is written for readers who need to understand and use the various methods of managing IBM tape encryption.

IBM PowerVM Virtualization Introduction and Configuration

IBM PowerVM Virtualization Introduction and Configuration PDF

Author: Scott Vetter

Publisher: IBM Redbooks

Published: 2015-11-24

Total Pages: 786

ISBN-13: 0738438146

DOWNLOAD EBOOK →

This IBM® Redbooks® publication provides an introduction to PowerVMTM virtualization technologies on Power System servers. PowerVM is a combination of hardware, firmware, and software that provides CPU, network, and disk virtualization. These are the main virtualization technologies: POWER7, POWER6, and POWER5 hardware POWER Hypervisor Virtual I/O Server Though the PowerVM brand includes partitioning, management software, and other offerings, this publication focuses on the virtualization technologies that are part of the PowerVM Standard and Enterprise Editions. This publication is also designed to be an introduction guide for system administrators, providing instructions for these tasks: Configuration and creation of partitions and resources on the HMC Installation and configuration of the Virtual I/O Server Creation and installation of virtualized partitions Examples using AIX, IBM i, and Linux This edition has been updated with the latest updates available and an improved content organization.

IBM System i Security: Protecting i5/OS Data with Encryption

IBM System i Security: Protecting i5/OS Data with Encryption PDF

Author: Yessong Johng

Publisher: IBM Redbooks

Published: 2008-07-24

Total Pages: 308

ISBN-13: 0738485373

DOWNLOAD EBOOK →

Regulatory and industry-specific requirements, such as SOX, Visa PCI, HIPAA, and so on, require that sensitive data must be stored securely and protected against unauthorized access or modifications. Several of the requirements state that data must be encrypted. IBM® i5/OS® offers several options that allow customers to encrypt data in the database tables. However, encryption is not a trivial task. Careful planning is essential for successful implementation of data encryption project. In the worst case, you would not be able to retrieve clear text information from encrypted data. This IBM Redbooks® publication is designed to help planners, implementers, and programmers by providing three key pieces of information: Part 1, "Introduction to data encryption" on page 1, introduces key concepts, terminology, algorithms, and key management. Understanding these is important to follow the rest of the book. If you are already familiar with the general concepts of cryptography and the data encryption aspect of it, you may skip this part. Part 2, "Planning for data encryption" on page 37, provides critical information for planning a data encryption project on i5/OS. Part 3, "Implementation of data encryption" on page 113, provides various implementation scenarios with a step-by-step guide.

Getting Started with z/OS Data Set Encryption

Getting Started with z/OS Data Set Encryption PDF

Author: Bill White

Publisher: IBM Redbooks

Published: 2021-12-10

Total Pages: 274

ISBN-13: 0738460222

DOWNLOAD EBOOK →

This IBM® Redpaper Redbooks® publication provides a broad explanation of data protection through encryption and IBM Z® pervasive encryption with a focus on IBM z/OS® data set encryption. It describes how the various hardware and software components interact in a z/OS data set encryption environment. In addition, this book concentrates on the planning and preparing of the environment and offers implementation, configuration, and operational examples that can be used in z/OS data set encryption environments. This publication is intended for IT architects, system programmer, and security administrators who plan for, deploy, and manage security on the Z platform. The reader is expected to have a basic understanding of IBM Z security concepts.

Implementing the IBM System Storage SAN32B-E4 Encryption Switch

Implementing the IBM System Storage SAN32B-E4 Encryption Switch PDF

Author: Jon Tate

Publisher: IBM Redbooks

Published: 2011-03-07

Total Pages: 156

ISBN-13: 0738435295

DOWNLOAD EBOOK →

This IBM® Redbooks® publication covers the IBM System Storage® SAN32B-E4 Encryption Switch, which is a high-performance stand-alone device designed to protect data-at-rest in mission-critical environments. In addition to helping IT organizations achieve compliance with regulatory mandates and meeting industry standards for data confidentiality, the SAN32B-E4 Encryption Switch also protects them against potential litigation and liability following a reported breach. Data is one of the most highly valued resources in a competitive business environment. Protecting that data, controlling access to it, and verifying its authenticity while maintaining its availability are priorities in our security-conscious world. Increasing regulatory requirements also drive the need for adequate data security. Encryption is a powerful and widely used technology that helps protect data from loss and inadvertent or deliberate compromise. In the context of data center fabric security, IBM provides advanced encryption services for Storage Area Networks (SANs) with the IBM System Storage SAN32B-E4 Encryption Switch. The switch is a high-speed, highly reliable hardware device that delivers fabric-based encryption services to protect data assets either selectively or on a comprehensive basis. The 8 Gbps SAN32B-E4 Fibre Channel Encryption Switch scales nondisruptively, providing from 48 up to 96 Gbps of encryption processing power to meet the needs of the most demanding environments with flexible, on-demand performance. It also provides compression services at speeds up to 48 Gbps for tape storage systems. Moreover, it is tightly integrated with one of the industry-leading, enterprise-class key management systems, the IBM Tivoli® Key Lifecycle Manager (TKLM), which can scale to support key life-cycle services across distributed environments.

Implementing IBM Tape in I5/OS

Implementing IBM Tape in I5/OS PDF

Author: Babette Haeusser

Publisher:

Published: 2008

Total Pages: 0

ISBN-13:

DOWNLOAD EBOOK →

This IBM® Redbooks® publication follows The IBM System Storage Tape Libraries Guide for Open Systems, SG24-5946, and can help you plan, install, and configure IBM Ultrium LTO tape drives, as well as the TS1120 Tape Drive and libraries in i5/OS® environments. The book focuses on the setup and customization of these drives and libraries. The first part of the book gives an overview of the System i"!family of servers and describes how to attach and configure the drives and libraries. It also covers basic installation and administration. We describe the sharing and partitioning of libraries and explain the concept and usage of the Advanced Library Management System (ALMS). In the second part of the book, we document how to use these products with Backup Recovery and Media Services (BRMS), how to implement Tape Encryption, and how to use the IBM TS7520 Virtualization Engine"!with i5/OS. This book can help IBM personnel, Business Partners, and customers to better understand and implement the IBM Ultrium LTO product line, and also the TS1120 Tape Drive attached to System i servers. We assume that the reader is familiar with tape drives and libraries and has a basic understanding of System i servers and i5/OS

Implementing the Storwize V7000 and the IBM System Storage SAN32B-E4 Encryption Switch

Implementing the Storwize V7000 and the IBM System Storage SAN32B-E4 Encryption Switch PDF

Author: Jon Tate

Publisher: IBM Redbooks

Published: 2012-02-15

Total Pages: 262

ISBN-13: 0738436399

DOWNLOAD EBOOK →

In this IBM® Redbooks® publication, we describe how these products can be combined to provide an encryption and virtualization solution: IBM System Storage® SAN32B-E4 Encryption Switch IBM Storwize® V7000 IBM Tivoli® Key Lifecycle Manager We describe the terminology that is used in an encrypted and virtualized environment, and we show how to implement these products to take advantage of their strengths. This book is intended for anyone who needs to understand and implement the IBM System Storage SAN32B-E4 Encryption Switch, IBM Storwize V7000, IBM Tivoli Key Lifecycle Manager, and encryption.

IBM System Storage Business Continuity: Part 2 Solutions Guide

IBM System Storage Business Continuity: Part 2 Solutions Guide PDF

Author: Charlotte Brooks

Publisher: IBM Redbooks

Published: 2009-06-09

Total Pages: 540

ISBN-13: 0738489727

DOWNLOAD EBOOK →

This IBM Redbooks publication is a companion to IBM System Storage Business Continuity: Part 1 Planning Guide, SG24-6547 . We assume that the reader of this book has understood the concepts of Business Continuity planning described in that book. In this book we explore IBM System Storage solutions for Business Continuity, within the three segments of Continuous Availability, Rapid Recovery, and Backup and Restore. We position these solutions within the Business Continuity tiers. We describe, in general, the solutions available in each segment, then present some more detail on many of the products. In each case, the reader is pointed to sources of more information.