IBM JCL Developer Solutions

PGP Command Line 9

PGP encryption is accepted as a means of implementing strong data protection across a wide variety of compliance regulations including PCI DSS, HIPAA / HITECH Act, GLBA / FFIEC, and state and federal privacy regulations. The Townsend Security implementation of PGP Command Line 9 on the IBM z/OS platform is a full implementation of commercial PGP that supports encryption, decryption, key management, key server integration, additional decryption keys (ADK), and the creation of self-decrypting archives for a variety of target platforms and operating systems. You can directly invoke PGP tasks from JCL in your applications on the IBM System z platform.

Native z/OS Batch Implementation

The implementation of PGP Command Line on the System z platform is a native z/OS executable. It does not use Java or USS file services as a part of its implementation. This means that you can use natural System z security applications such as RACF, ACF2, and Top Secret to secure the PGP configuration and encryption key files. Configuration and local PGP keys are stored in a PDS file that you define, and you will implement your PGP applications using JCL.

Sequential and PDS File Support

You can easily encrypt and decrypt data in sequential and PDS files. Encrypted files can be transferred to other platforms such as Windows, Linux, Unix, and IBM i (AS/400, iSeries). The payload of an encrypted file can be in either the ASCII or EBCDIC character set to meet the needs of the recipient. When decrypting a file you received from an ASCII system, you can easily convert the content to the EBCDIC character set for processing on the System z platform.

VSAM File Support

VSAM files are supported by PGP Command Line for System z including support for variable length files. You can encrypt and decrypt VSAM files using native IBM utilities such as XMIT and IDCAMS. The PGP documentation for System z provides information on VSAM file processing and examples of its use.

Documentation and Sample Code

The IBM System z implementation of PGP Command Line includes a separate manual on the installation and use of PGP in the z/OS batch environment. Examples of all of the major PGP tasks is provided including encryption, decryption, key creation, key import, key export, signing, and key server integration. A special section on processing VSAM files is also provided. When you install PGP Command Line on your IBM System z platform you will receive over 20 example JCL applications to help you get started.