ICSF. Secret key, DATA, Domain parameters.



Post anything related to mainframes (IBM & UNISYS) if not fit in any of the above categories

ICSF. Secret key, DATA, Domain parameters.

Postby Lesya » Wed Nov 09, 2011 1:48 pm

Could you explain me: When and how objects of token such as Secret key, DATA and Domain parameters are created?
Lesya
 
Posts: 3
Joined: Wed Nov 09, 2011 1:26 pm
Has thanked: 0 time
Been thanked: 0 time

Re: ICSF. Secret key, DATA, Domain parameters.

Postby BillyBoyo » Wed Nov 09, 2011 2:33 pm

Through training, consulting the documentation, colleagues, support people.

If you don't know how to encrypt you shouldn't be doing it. If you should be doing it, you need to know how.

If it is just the thirst for knowledge, you could google. I tried ICSF Mainframe and got some stuff.
BillyBoyo
Global moderator
 
Posts: 3804
Joined: Tue Jan 25, 2011 12:02 am
Has thanked: 22 times
Been thanked: 265 times

Re: ICSF. Secret key, DATA, Domain parameters.

Postby Lesya » Wed Nov 09, 2011 4:25 pm

Thanks for your advice. But all information from google didn't help me.
I can't understand when there are these objects. Maybe when you add a token, these objects should be created automatically.
Maybe someone has already worked with ICSF and can help me.
Lesya
 
Posts: 3
Joined: Wed Nov 09, 2011 1:26 pm
Has thanked: 0 time
Been thanked: 0 time

Re: ICSF. Secret key, DATA, Domain parameters.

Postby BillyBoyo » Wed Nov 09, 2011 5:36 pm

Somehow I got to z/OS V1R10.0 ICSF Application Programmer's Guide in PDF format. Very quickly. Its probably there on the "bookshelf" as well. From IBM. There is some more technical stuff also readily available.

If you can't get your answers from what is available, tell us what you are trying to do, at least.
BillyBoyo
Global moderator
 
Posts: 3804
Joined: Tue Jan 25, 2011 12:02 am
Has thanked: 22 times
Been thanked: 265 times

Re: ICSF. Secret key, DATA, Domain parameters.

Postby enrico-sorichetti » Wed Nov 09, 2011 5:58 pm

it does not seem overly difficult to ...
start from
http://www-03.ibm.com/systems/z/os/zos/ ... index.html
choose the zOS level You are using
z/OS documentation by release:
1.13 | 1.12 | 1.11 | 1.10 | 1.9 | 1.8 | 1.7 | 1.6 | 1.5 | 1.4 | 1.3 | 1.2 |

1.10 for example
to arrive
http://www-03.ibm.com/systems/z/os/zos/ ... books.html
and click on
List all z/OS V1R10.0 elements and features bookshelves

to arrive
http://www-03.ibm.com/systems/z/os/zos/ ... ves10.html
and click on the search titles box under
z/OS V1R10.0 elements and features - 388 books
List books | Download shelf | Download shelf index


to arrive
http://publibz.boulder.ibm.com/cgi-bin/ ... rch+titles
where You type ICSF and click on the find button

to arrive
http://publibz.boulder.ibm.com/cgi-bin/ ... UBMIT=Find

z/OS V1R10.0 Cryptographic Services ICSF Administrator's Guide - HCR7751 CSFB3Z90 11/13/08 10:44:51 SA22-7521-13
z/OS V1R10.0 Cryptographic Services ICSF Application Programmer's Guide - HCR7751 CSFB4Z90 11/12/08 14:53:32 SA22-7522-12
z/OS V1R10.0 Cryptographic Services ICSF Messages - HCR7751 CSFB7Z90 11/13/08 13:50:50 SA22-7523-12
z/OS V1R10.0 Cryptographic Services ICSF Overview - HCR7751 CSFB5Z90 11/13/08 10:24:59 SA22-7519-12
z/OS V1R10.0 Cryptographic Services ICSF System Programmer's Guide - HCR7751 CSFB2Z90 11/13/08 13:36:48 SA22-7520-13
z/OS V1R10.0 Cryptographic Services ICSF TKE PCIX Workstation User's Guide (check Resource Link for a more current copy of this publication)
z/OS V1R9.0-V1R10.0 Cryptographic Services ICSF Writing PKCS #11 Applications


it is unbelievable that people trying to deal with advanced topics as cryptography lack the basic skill/competence of searching for the relevant documentation
:geek:

another place to search would be the IBM REDBOOKS site
cheers
enrico
When I tell somebody to RTFM or STFW I usually have the page open in another tab/window of my browser,
so that I am sure that the information requested can be reached with a very small effort
enrico-sorichetti
Global moderator
 
Posts: 2994
Joined: Fri Apr 18, 2008 11:25 pm
Has thanked: 0 time
Been thanked: 164 times

Re: ICSF. Secret key, DATA, Domain parameters.

Postby Lesya » Wed Nov 09, 2011 7:38 pm

I have read that ICSF supports PKCS #11 session objects and token objects. The following classes of objects can be associated with these object types:
Certificate, Public key, Private key, Secret key, Data objects and Domain parameters.
I know that if we bind certificate to token Certificate, Public key and Private key objects will be created in token.
I can't find information about others objects. When are created?
Lesya
 
Posts: 3
Joined: Wed Nov 09, 2011 1:26 pm
Has thanked: 0 time
Been thanked: 0 time


Return to All other Mainframe Topics

 


  • Related topics
    Replies
    Views
    Last post