IBM System i Security: Protecting i5/OS Data with Encryption

IBM System i Security: Protecting i5/OS Data with Encryption
Author: Yessong Johng
Publisher: IBM Redbooks
Total Pages: 308
Release: 2008-07-24
Genre: Computers
ISBN: 0738485373

Regulatory and industry-specific requirements, such as SOX, Visa PCI, HIPAA, and so on, require that sensitive data must be stored securely and protected against unauthorized access or modifications. Several of the requirements state that data must be encrypted. IBM® i5/OS® offers several options that allow customers to encrypt data in the database tables. However, encryption is not a trivial task. Careful planning is essential for successful implementation of data encryption project. In the worst case, you would not be able to retrieve clear text information from encrypted data. This IBM Redbooks® publication is designed to help planners, implementers, and programmers by providing three key pieces of information: Part 1, "Introduction to data encryption" on page 1, introduces key concepts, terminology, algorithms, and key management. Understanding these is important to follow the rest of the book. If you are already familiar with the general concepts of cryptography and the data encryption aspect of it, you may skip this part. Part 2, "Planning for data encryption" on page 37, provides critical information for planning a data encryption project on i5/OS. Part 3, "Implementation of data encryption" on page 113, provides various implementation scenarios with a step-by-step guide.

IBM i 6.1 Technical Overview

IBM i 6.1 Technical Overview
Author: Jim Cook
Publisher: IBM Redbooks
Total Pages: 518
Release: 2009-12-16
Genre: Computers
ISBN: 0738433608

This IBM® Redbooks® publication introduces a technical overview of the main new features, functions and enhancements available in IBM i 6.1 (formerly called i5/OS® V6R1). It gives a summary and brief explanation of new capabilities and what has changed in the operating system, and also discusses many of the licensed programs and application development tools associated with IBM i. Many other new and enhanced functions are described, such as virtualization of storage, security, JavaTM performance, improved performance with IBM System StorageTM devices, backup and recovery, including base IBM i, Backup, Recovery and Media Services (BRMS). The book introduces the PowerHATM product, IBM Systems Director-based system management and an easier Web enablement. The information provided in this book will be useful for customers, Business Partners, and IBM service professionals involved with planning, supporting, upgrading, and implementing IBM i 6.1 solutions.

IBM i 6.1 Independent ASPs: A Guide to Quick Implementation of Independent ASPs

IBM i 6.1 Independent ASPs: A Guide to Quick Implementation of Independent ASPs
Author: Scott Vetter
Publisher: IBM Redbooks
Total Pages: 268
Release: 2009-12-10
Genre: Computers
ISBN: 0738433683

This IBM® Redbooks® publication explains how to configure and manage independent disk pool (IASP) functionality of IBM i 6.1. It is designed to help IBM technical professionals, business partners, and customers understand and implement independent disk pools in the IBM i 6.1. In addition, this publication provides the background information that is necessary to plan, implement, and customize this functionality to your particular environment. It provides guidance on running user applications with either application data or most application objects residing in an independent disk pool. Considering that you can also use independent disk pools in a cluster environment, this publication shows you the basic steps to make your independent disk pool switchable between two Power SystemsTM servers or a single server with multiple LPARs. Independent auxiliary storage pools have many business and technical advantages for Power Systems using IBM i. Not only are independent auxiliary storage pools (IASPs) easy to create and maintain, most applications can use them by simple work management changes. IASPs can provide immediate benefits to your enterprise.

Logical Partitions on System i5: A Guide to Planning and Configuring LPAR with HMC on System i

Logical Partitions on System i5: A Guide to Planning and Configuring LPAR with HMC on System i
Author: Nick Harris
Publisher: IBM Redbooks
Total Pages: 536
Release: 2006-05-17
Genre: Computers
ISBN: 0738496251

This IBM Redbooks publication gives a broad understanding of the new System i5 architecture as it applies to logically partitioned System i5 systems. This functionality is delivered through a new configuration and management interface called the Hardware Management Console (HMC). Reading this book will help you design your server partition scheme from scratch. We also discuss the requirements to create a solution to migrate from existing iSeries servers with and without logical partitions. This book will help you install, tailor, and configure logical partitions (LPARs) on System i5 systems. You will understand how to set up the server and HMC via the Guided Setup Wizard. We also cover the creation of multiple i5/OS partitions, where the OS could be IBM i5/OS, AIX, or Linux.

IBM Systems Director Navigator for i

IBM Systems Director Navigator for i
Author: Brandon Schulz
Publisher: IBM Redbooks
Total Pages: 224
Release: 2009-12-02
Genre: Computers
ISBN: 0738433802

In this IBM® Redbooks® publication we discuss IBM Systems Director Navigator for i, which is a Web console interface for IBM i administration where you can work with the Web-enabled tasks of System i® Navigator. IBM Systems Director Navigator for i includes a number of welcome pages that allow you to quickly find the task that you want to perform. The IBM Systems Director Navigator for i interface is not just a set of URL addressable tasks, but is a robust Web console from which you can manage your IBM i system. However, the System i Navigator Tasks on the Web, which are a set of URL-addressable tasks, can be accessed by using the URL or from within the IBM Systems Director Navigator for i interface. The information in this book is intended to help you start using the Web-based console, IBM Systems Director Navigator for i, by providing you with a look at the new interface as well as tips for working with various parts of the new console.

Security Guide for IBM i V6.1

Security Guide for IBM i V6.1
Author: Jim Cook
Publisher: IBM Redbooks
Total Pages: 426
Release: 2009-05-29
Genre: Computers
ISBN: 0738432865

The IBM® i operation system (formerly IBM i5/OS®) is considered one of the most secure systems in the industry. From the beginning, security was designed as an integral part of the system. The System i® platform provides a rich set of security features and services that pertain to the goals of authentication, authorization, integrity, confidentiality, and auditing. However, if an IBM Client does not know that a service, such as a virtual private network (VPN) or hardware cryptographic support, exists on the system, it will not use it. In addition, there are more and more security auditors and consultants who are in charge of implementing corporate security policies in an organization. In many cases, they are not familiar with the IBM i operating system, but must understand the security services that are available. This IBM Redbooks® publication guides you through the broad range of native security features that are available within IBM i Version and release level 6.1. This book is intended for security auditors and consultants, IBM System Specialists, Business Partners, and clients to help you answer first-level questions concerning the security features that are available under IBM. The focus in this publication is the integration of IBM 6.1 enhancements into the range of security facilities available within IBM i up through Version release level 6.1. IBM i 6.1 security enhancements include: - Extended IBM i password rules and closer affinity between normal user IBM i operating system user profiles and IBM service tools user profiles - Encrypted disk data within a user Auxiliary Storage Pool (ASP) - Tape data save and restore encryption under control of the Backup Recovery and Media Services for i5/OS (BRMS) product, 5761-BR1 - Networking security enhancements including additional control of Secure Sockets Layer (SSL) encryption rules and greatly expanded IP intrusion detection protection and actions. DB2® for i5/OS built-in column encryption expanded to include support of the Advanced Encryption Standard (AES) encryption algorithm to the already available Rivest Cipher 2 (RC2) and Triple DES (Data Encryption Standard) (TDES) encryption algorithms. The IBM i V5R4 level IBM Redbooks publication IBM System i Security Guide for IBM i5/OS Version 5 Release 4, SG24-6668, remains available.

Introduction to Storage Area Networks

Introduction to Storage Area Networks
Author: Jon Tate
Publisher: IBM Redbooks
Total Pages: 302
Release: 2018-10-09
Genre: Computers
ISBN: 0738442887

The superabundance of data that is created by today's businesses is making storage a strategic investment priority for companies of all sizes. As storage takes precedence, the following major initiatives emerge: Flatten and converge your network: IBM® takes an open, standards-based approach to implement the latest advances in the flat, converged data center network designs of today. IBM Storage solutions enable clients to deploy a high-speed, low-latency Unified Fabric Architecture. Optimize and automate virtualization: Advanced virtualization awareness reduces the cost and complexity of deploying physical and virtual data center infrastructure. Simplify management: IBM data center networks are easy to deploy, maintain, scale, and virtualize, delivering the foundation of consolidated operations for dynamic infrastructure management. Storage is no longer an afterthought. Too much is at stake. Companies are searching for more ways to efficiently manage expanding volumes of data, and to make that data accessible throughout the enterprise. This demand is propelling the move of storage into the network. Also, the increasing complexity of managing large numbers of storage devices and vast amounts of data is driving greater business value into software and services. With current estimates of the amount of data to be managed and made available increasing at 60% each year, this outlook is where a storage area network (SAN) enters the arena. SANs are the leading storage infrastructure for the global economy of today. SANs offer simplified storage management, scalability, flexibility, and availability; and improved data access, movement, and backup. Welcome to the cognitive era. The smarter data center with the improved economics of IT can be achieved by connecting servers and storage with a high-speed and intelligent network fabric. A smarter data center that hosts IBM Storage solutions can provide an environment that is smarter, faster, greener, open, and easy to manage. This IBM® Redbooks® publication provides an introduction to SAN and Ethernet networking, and how these networks help to achieve a smarter data center. This book is intended for people who are not very familiar with IT, or who are just starting out in the IT world.