Starting BES for the first time : message BES1KM597W , what is NumberOfGenerations? LISTCAT display correct?
Article ID: 379199
Updated On:
Products
Issue/Introduction
1) in the *.CTAPPARM(SYMKEYS), what does NumberOfGenerations = 2 ? mean?
2) In the *.CTAPPROC(BES) what is the // BES=&STEPNAME ?
3))Started the BES task per the procedure but got a WTOR.
*145 BES1KM597W Enter new database pass phrase or ABORT
R 145,SUPPRESSED
BES1KM588E CANCEL is not allowed
4) after BES is up and Issuing a LISTCAT on a newly created tape it shows DATA SET ENCRYPTION ---- (NO)
Resolution
1) As far as your question about *.CTAPPARM(SYMKEYS) for
NumberOfGenerations = 2
means that you have your ACTIVE KEY and will have 2 future ones.
The NumberOfGenerations= attribute specifies how many keys to generate in advance.
Since you have Regenerate = Manual then you have to use the REGENERATE command to create the next one.
The currently active key is there for READ ONLY
2) The *.CTAPPROC(BES) for the // BES=&STEPNAME, statement is documented here:
//* * YOU CAN CHANGE THE PARMDIR PARAMETER AND USE THE ONE BELOW IF *
//* * YOU WOULD LIKE TO HAVE DIFFERENT PARMLIB DIRECTORIES FOR *
//* * EACH LPAR NAME AND BES SUBSYSTEM (LIKE PRODBES1). *
//* * *
//* * PARMDIR=&SYSNAME.&STEPNAME., *
//* * *
That is what that is used for.
3) If it's the first time starting up BES , there needs to be a PASSPHRASE entered, that MUST BE REMEMBERED.
This can NOT be forgotten because then the encrypted data is lost.
The message issued will be:
*145 BES1KM597W Enter new database pass phrase or ABORT
Defining a passphrase will bring product up
DATA SET ENCRYPTION ---(NO) is strictly for SMS managed DASD files. so this is okay. Your JCL is showing that it is encrypted and in the BINQ you see BESKEY=00003 which indicates it was encrypted
Feedback
