Defining the ICSF Dataset Key Label for PDS to Use Pervasive Encryption

In the following sample JCL, values are shown for clarity. These are the current IBM defaults. 

SYMEXPORTABLE(BYANY) and ASYMUSAGE(HANDSHAKE SECUREEXPORT)

In the following sample PERMIT statement, ID contains only group names, not user ID names. During installation, you can choose which name to use or to use a combination of both.

Note: PGMYMG, PGM, QCS, EDA, and CSD in the sample code are arbitrary users and groups.
//TSOBATCH EXEC PGM=IKJEFT01

//SYSTSPRT DD SYSOUT=*

//SYSTSIN DD *

RDEF CSFKEYS DATASET.PGMYMG.ENCRYPTKEY.001 OWNER(SYS1) UACC(NONE) -

ICSF(SYMCPACFWRAP(YES) SYMCPACFRET(YES)-

SYMEXPORTABLE(BYANY) ASYMUSAGE(HANDSHAKE SECUREEXPORT))

PERMIT DATASET.PGMYMG.ENCRYPTKEY.001 CLASS(CSFKEYS) ACCESS(READ) -

ID(PGM QCS EDA CSD)

SETROPTS RACLIST(CSFKEYS) REFRESH

/*

//

ICSF Panels

  1. Select option 5, UTILITY, as shown in the following image, and press Enter.

  2. Select option 5, CKDS KEYS, as shown in the following image, and press Enter.

  3. Select option 7, Generate AES DATA keys, as shown in the following image, and press Enter.

  4. Type the CKDS record label for the new key and select the AES key bit length, as shown in the following image, and press Enter.

    If the operation was successful, Key Generated is returned at the upper-right corner of the screen, as shown in the following image.