Creating an Encrypted Copy of an Existing Database

#### Search Results

Search

# Creating an Encrypted Copy of an Existing Database

To create an encrypted copy of an existing database while keeping the database active, create and format new container datasets for a copy of the database, save the database (online or offline), and restore it into the new container datasets:

1. Run ADAFRM ASSOFRM, DATAFRM and so on, specifying the database container datasets with DISP=(NEW,CATLG) and the encryption key label (DSKEYLBL parameter). Alternatively, the key label can be derived from the RACF profile or the SMS policy for each dataset.

2. If an up-to-date copy of the database is desired, run ADASAV SAVE (database) online or offline. Otherwise, use the save dataset(s) from a previous database save operation.

3. If an online save was performed in step 2, force a PLOG switch (FEOFPL) and wait for the resulting ADARES PLCOPY job to finish.

4. Using the save dataset(s), run ADASAV RESTORE — or if an online save was taken, ADASAV RESTONL with the sequential PLOG dataset(s) spanning the online save operation — to restore the database into the new, encrypted container datasets.

   If appropriate for the circumstances, use the NEWDBID parameter to set a new DBID for the encrypted database.

See sample job AEZJ020 in the ADAvrs.JOBS library.