GLOBAL Definition

By using GLOBAL definition, you can specify a default encryption algorithm for the entire system.

Note: GLOBAL definitions are used only when they are not overridden by NODE and Transfer Interface definitions.

The format of GLOBAL definition is as follows:

ENCRYPT={NONE | AES | AES128 | DES | 3DES | BLOWFISH | BLOWFISH_LONG | AES},PASSONLY

This parameter specifies the level of encryption that is used by default for the entire system. The following table lists the description of each parameter option:

Option Alternate Specification Description
NONE No encryption is used. This is the default setting.
AES AES 256-bit encryption is used.
AES128 AES 128-bit encryption is used.
DES DES encryption is used.

For more information of DES encryption, see DES Encryption.

3DES Triple DES encryption is used.
BLOWFISH BF Blowfish 56-bit encryption is used.

For more information of Blowfish encryption, see Blowfish Encryption.

BLOWFISH_LONG BFL Blowfish 448-bit encryption is used.
AES RJ/AES AES 256-bit encryption is used.

For more information of AES encryption, see AES Encryption.

When the PASSONLY operand is used, only the password is encrypted by using the specified encryption algorithm. The data is not encrypted.

Note: The PASSONLY operand is only valid for file transfers between z/OS and z/OS systems.

Examples Using GLOBAL Definition

The following examples show how to use GLOBAL definition to specify a default encryption algorithm for the entire system.

Example 1:

ENCRYPT=NONE

The platform server encrypts the password by using a proprietary algorithm. Data is not encrypted.

Example 2:

ENCRYPT=BLOWFISH_LONG or ENCRYPT=BFL

The platform server encrypts the password and data by using Blowfish 448-bit encryption algorithm.

Example 3:

ENCRYPT=DES,PASSONLY

The platform server encrypts the password by using DES encryption algorithm. Data is not encrypted.