PKZIP®/SecureZIP™ for z/OS® User’s Guide SZZU-V9R0000 PKWARE Inc. PKWARE, Inc. 648 N Plankinton Avenue, Suite 220 Milwaukee, WI 53203 Main office: 888-4PKWARE (888-475-9273) Sales: 937-847-2374 (888-4PKWARE / 888-475-9273) Sales: Email: [email protected] Support: 937-847-2687 Support: http://www.pkware.com/business_and_developers/support Fax: 414-289-9789 Web Site: http://www.pkware.com 9.0 Edition (2006) SecureZIP™ for z/OS, PKZIP® for z/OS, SecureZIP for i5/OS®, PKZIP for i5/OS, SecureZIP for UNIX, and SecureZIP for Windows are just a few of the members of the PKZIP family. PKWARE Inc. would like to thank all the individuals and companies—including our customers, resellers, distributors, and technology partners—who have helped make PKZIP the industry standard for trusted ZIP solutions. PKZIP enables our customers to efficiently and securely transmit and store information across systems of all sizes, ranging from desktops to mainframes. This edition applies to the following PKWARE Inc. licensed programs: PKZIP for z/OS (Version 9, Release 0, 2006) SecureZIP for z/OS (Version 9, Release 0, 2006) SecureZIP for z/OS Reader (Version 9, Release 0, 2006) SecureZIP for z/OS SecureLink (Version 9, Release 0, 2006) PKZIP(R) is a registered trademark of PKWARE(R) Inc. SecureZIP is a trademark of PKWARE(R) Inc. z/OS, i5/OS, zSeries, and iSeries are registered trademarks of IBM Corporation. Other product names mentioned in this manual may be trademarks or registered trademarks of their respective companies and are hereby acknowledged. Any reference to licensed programs or other material, belonging to any company, is not intended to state or imply that such programs or material are available or may be used. The copyright in this work is owned by PKWARE Inc., and the document is issued in confidence for the purpose only for which it is supplied. It must not be reproduced in whole or in part or used for tendering purposes except under an agreement or with the consent in writing of PKWARE Inc., and then only on condition that this notice is included in any such reproduction. No information as to the contents or subject matter of this document or any part thereof either directly or indirectly arising there from shall be given or communicated in any manner whatsoever to a third party being an individual firm or company or any employee thereof without the prior consent in writing of PKWARE Inc. Copyright © 1989 - 2006 PKWARE Inc. All rights reserved. Contents PREFACE............................................................................................................. 1 Notices.........................................................................................................................1 About this Manual.......................................................................................................1 Conventions Used in This Manual ............................................................................3 PKZIP and SecureZIP Manuals..................................................................................3 Related Publications ..................................................................................................4 Related Information on the Internet..........................................................................5 User Help and Contact Information ..........................................................................5 1 INTRODUCTION TO PKZIP AND SECUREZIP FOR Z/OS.......................... 6 Data Compression......................................................................................................7 ZIP Archives ................................................................................................................7 Cyclic Redundancy Check.........................................................................................8 Distinctive Features of PKZIP and SecureZIP for z/OS ..........................................8 Distinctive Features of SecureZIP for z/OS..............................................................9 Encryption Using Passwords and/or Digital Certificates.....................................10 Cross Platform Compatibility ..................................................................................10 2 INTRODUCTION TO DATA SECURITY ...................................................... 12 SecureZIP for z/OS Security Basics .......................................................................12 Operating System Levels........................................................................................13 Digital Certificate Formats.......................................................................................13 SecureZIP for Windows Compatibility.....................................................................13 General Information to Help You Get Started.........................................................14 How do we activate MASTER_RECIPIENT Contingency Keys? ...........................14 Encryption .................................................................................................................17 Authentication...........................................................................................................17 iii Data Integrity...........................................................................................................18 Digital Signature Validation.....................................................................................18 Digital Signature Source Validation ........................................................................19 Public-Key Infrastructure and Digital Certificates ................................................19 Public-Key Infrastructure (PKI) ...............................................................................19 x.509 .......................................................................................................................20 Digital Certificates ...................................................................................................20 Certificate Authority (CA) ........................................................................................20 Private Key..............................................................................................................20 Public Key ...............................................................................................................21 Certificate Authority and Root Certificates..............................................................21 Setting Up Stores for Digital Certificates on zOS .................................................21 Setting Up the Certificate Stores.............................................................................21 Updating the Certificate Stores ...............................................................................23 Types of Encryption Algorithms .............................................................................23 FIPS 46-3, Data Encryption Standard (DES)..........................................................23 Triple DES Algorithm (3DES)..................................................................................24 Advanced Encryption Standard (AES)....................................................................24 Comparison of the 3DES and AES Algorithms.......................................................24 RC4 .........................................................................................................................25 Key Management ......................................................................................................25 Passwords and PINS................................................................................................26 Recipient Based Encryption....................................................................................26 Random Number Generation...................................................................................26 Integrity of Public and Private Keys .......................................................................27 3 PKZIP AND SECUREZIP FOR Z/OS RELEASE INFORMATION............... 28 Release Summary.....................................................................................................28 New Products..........................................................................................................28 New Features..........................................................................................................28 New Commands and Defaults ................................................................................31 Command Changes ................................................................................................35 Message Changes ..................................................................................................37 Enhancements for Secure Data..............................................................................37 Restrictions for PKZIP and SecureZIP for z/OS ....................................................37 Region Size and Storage..........................................................................................39 SMS Dataclass Considerations...............................................................................40 Note for users of PKZIP for MVS and PKZIP for zSeries 5.6 .................................41 Reserved DDNAMEs.................................................................................................41 SYSPRINT ..............................................................................................................42