PKZIP®/SecureZIP® for z/OS® System Administrator’s Guide SZZSA- V111R0001 PKWARE Inc. PKWARE, Inc. 648 N Plankinton Avenue, Suite 220 Milwaukee, WI 53203 Main office: 888-4PKWARE (888-475-9273) Sales: 937-847-2374 (888-4PKWARE / 888-475-9273) Sales - E-Mail: [email protected] Support: 937-847-2687 Support - http://www.pkware.com/support/mainframe Web Site: http://www.pkware.com 11.1 Edition (2009) SecureZIP for z/OS, PKZIP for z/OS, SecureZIP for i5/OS®, PKZIP for i5/OS, SecureZIP for UNIX, and SecureZIP for Windows are just a few of the members of the PKWARE product family. PKWARE Inc. would like to thank all the individuals and companies—including our customers, resellers, distributors, and technology partners—who have helped make PKZIP the industry standard for trusted ZIP solutions. SecureZIP enables our customers to efficiently and securely transmit and store information across systems of all sizes, ranging from desktops to mainframes. This edition applies to the following PKWARE Inc. licensed programs: PKZIP for z/OS (Version 11, Release 1, 2009) SecureZIP for z/OS (Version 11, Release 1, 2009) SecureZIP Partner for z/OS (Version 11, Release 1, 2009) PKWARE, PKZIP, and SecureZIP are registered trademarks of PKWARE, Inc. z/OS, i5/OS, zSeries, and iSeries are registered trademarks of IBM Corporation. Other product names mentioned in this manual may be trademarks or registered trademarks of their respective companies and are hereby acknowledged. Any reference to licensed programs or other material, belonging to any company, is not intended to state or imply that such programs or material are available or may be used. The copyright in this work is owned by PKWARE Inc., and the document is issued in confidence for the purpose only for which it is supplied. It must not be reproduced in whole or in part or used for tendering purposes except under an agreement or with the consent in writing of PKWARE Inc., and then only on condition that this notice is included in any such reproduction. No information as to the contents or subject matter of this document or any part thereof either directly or indirectly arising there from shall be given or communicated in any manner whatsoever to a third party being an individual firm or company or any employee thereof without the prior consent in writing of PKWARE Inc. Copyright © 1989 - 2009 PKWARE Inc. All rights reserved. MVS/QuickRef Copyright © 1989-2009, Chicago-Soft, Ltd. Contents PREFACE............................................................................................................. 1 Notices.........................................................................................................................1 About This Manual......................................................................................................1 Conventions Used in This Manual ............................................................................1 Related Publications ..................................................................................................2 Related Information on the Internet..........................................................................4 User Help and Contact Information ..........................................................................4 1 SYSTEM PLANNING AND ADMINISTRATION............................................. 5 Planning for Administration Activities .....................................................................5 System Requirements................................................................................................7 Operating System .....................................................................................................7 Region Size and Storage ..........................................................................................8 Static Disk Space......................................................................................................9 Tape Device Considerations.....................................................................................9 UserID OMVS Segment..........................................................................................10 SecureZIP ICSF Operations ...................................................................................10 z/OS UNIX File System (HFS) ................................................................................15 Migration Considerations ........................................................................................17 Release History and Setting Changes....................................................................19 Distinctive Features of PKZIP and SecureZIP for z/OS ........................................20 Distinctive Features of SecureZIP for z/OS............................................................21 PKWARE PartnerLink: SecureZIP Partner for z/OS ..............................................21 Encryption .................................................................................................................22 Authentication...........................................................................................................22 Data Integrity...........................................................................................................22 Digital Signature Validation.....................................................................................23 Digital Signature Source Validation ........................................................................23 Public-Key Infrastructure and Digital Certificates ................................................24 Contents iii Public-Key Infrastructure (PKI) ...............................................................................24 x.509 .......................................................................................................................24 Digital Certificates ...................................................................................................25 Certificate Authority (CA) ........................................................................................25 Private Key..............................................................................................................25 Public Key ...............................................................................................................25 Certificate Authority and Root Certificates..............................................................26 Setting Up Stores for Digital Certificates on z/OS ................................................26 Setting Up the Certificate Stores.............................................................................26 Updating the Certificate Stores ...............................................................................28 Types of Encryption Algorithms .............................................................................28 Standard..................................................................................................................28 FIPS 46-3, Data Encryption Standard (DES)..........................................................29 Triple DES Algorithm (3DES)..................................................................................29 Advanced Encryption Standard (AES)....................................................................29 Comparison of the 3DES and AES Algorithms.......................................................29 RC4 .........................................................................................................................30 Key Management ......................................................................................................31 Passwords and PINS................................................................................................31 Recipient Based Encryption....................................................................................31 Random Number Generation...................................................................................32 Integrity of Public and Private Keys .......................................................................32 Data Encryption ........................................................................................................32 2 INSTALLATION, LICENSING, AND CONFIGURATION............................. 34 Installation Overview................................................................................................34 Type of Media Distribution for Installation.............................................................34 Installation from Downloaded File or CD ...............................................................35 Non-SMP/E Installation...........................................................................................35 SMP/E Installation...................................................................................................37 Installing from Tape..................................................................................................41 Tailoring Site-Specific Changes to the Defaults Module......................................42 Tailoring Site-Locking Commands .........................................................................43 Protecting Files with the SAFETYEX Module ........................................................43 Tailoring for Filename and Data Character Set Conversions ..............................44 SMS Dataclass Considerations...............................................................................44 Note for users of PKZIP for MVS and PKZIP for