Creating an Encrypted Copy of an Existing Database

To create an encrypted copy of an existing database while keeping the database active, create and format new container datasets for a copy of the database, save the database (online or offline), and restore it into the new container datasets:

  1. Run ADAFRM ASSOFRM, DATAFRM and so on, specifying the database container datasets with DISP=(NEW,CATLG) and the encryption key label (DSKEYLBL parameter). Alternatively, the key label can be derived from the RACF profile or the SMS policy for each dataset.

  2. If an up-to-date copy of the database is desired, run ADASAV SAVE (database) online or offline. Otherwise, use the save dataset(s) from a previous database save operation.

  3. If an online save was performed in step 2, force a PLOG switch (FEOFPL) and wait for the resulting ADARES PLCOPY job to finish.

  4. Using the save dataset(s), run ADASAV RESTORE — or if an online save was taken, ADASAV RESTONL with the sequential PLOG dataset(s) spanning the online save operation — to restore the database into the new, encrypted container datasets.

    If appropriate for the circumstances, use the NEWDBID parameter to set a new DBID for the encrypted database.

See sample job DUP020 in the AEZvrs.JOBS library.