z/OS V14 March 2012

Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc. What’s Being Released? – z/OS  Release & Announce Date: 3/12/2012  PKZIP and SecureZIP for z/OS  SecureZIP Partner for z/OS

Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc. What’s New in v14  Create and Extract OpenPGP Files  zIIP Support  Command Substitution

Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc. OpenPGP Integration  Encrypt ZIP files using passphrase, x.509 digital certificates, and/or OpenPGP keys  Encrypt OpenPGP files using passphrase and/or OpenPGP keys  Sign ZIP files using x.509 digital certificates  Sign OpenPGP files with OpenPGP keys  Authenticate files signed with OpenPGP keys and x.509 digital certificates

Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc. OpenPGP Integration  Keys stored in file based pgp key rings Supports OpenPGP Contingency keys  Integrated with SecureZIP ISPF interface  New and modified commands  Native z/OS implementation, exploits hardware CPACF high speed encryption and hashing  Not FIPS 140 Compliant in OpenPGP mode

Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc. Levels of OpenPGP Function Edition OpenPGP Functionality* PKZIP SECreate OpenPGP format files NO encryption, NO decryption PKZIP EEDecrypt OpenPGP passphrases SecureZIP SEEncrypt & Decrypt OpenPGP passphrases Decrypt using OpenPGP keys SecureZIP EEEncrypt using OpenPGP Keys *OpenPGP function is incremental

Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc. SecureZIP Administration Panel

Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc. Main ZIP Panel – Pop-up “Archive File Format” pop-up has new value for PGPFILE format

Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc. New OpenPGP Commands/ Controls  New Commands -{PGPSET,attribute list} -{PGPKEYRDEF=ring_handle;PUB|PVT;FILE;filename}  Modified Commands -ARCHIVE_ZIPFORMAT=PGPFILE -RECIPIENT(PGP:ring_handle[,CN=| =|KEYID=|*ALL][,PASSWORD=]) -SIGN_ARCHIVE(PGP:ring_handle[,CN=| =|KEYID=][,PASSWORD=]) -ENCRYPTION_METHOD=CAST5 -AUTHCHK(ARCHIVE, PGP:ring_handle)  Security Server Resource Controls – New Values ENCRYPTION_METHOD.CAST5 CRYPTO_KEYTYPE.RECIPIENT.PGPKEYS

Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc. SecureZIP PartnerLink v14 Sponsor Partner PGP Partner For the Partner that insists on OpenPGP files, they don’t need SecureZIP Partner, they already have a tool to decrypt OpenPGP files

Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc. zIIP Specialty Engine Support  z Integrated Information Processor - zIIP Initially for DB2 Workload, now sort, compression, anything that can be scheduled in an enclave SRB Optional, chargeable IBM System z feature Offloads work from general CPs  Using zIIP’s can save customers money zIIPs do not affect the MSU’s (MIPS) Are less expensive than general processors

Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc. V14 Adds Support for zIIP  PKZIP and SecureZIP – All Editions  –ZIIP_RUNOPTS(Y|N) Controls whether qualified processing may be scheduled to execute on an active zIIP  Using zIIP requires that PKZIP/SecureZIP be APF enabled, or activated through the PKWSVC.

Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc. What does zIIP Support mean?  Work is MOVED from the general processor to the zIIP Doesn’t make it run faster Doesn’t use less total CPU Task processing time offloaded to enclave CPU  For faster processing with less CPU Consider using Hardware Compression feature

Copyright © 2012 PKWARE, Inc. and its licensors. All rights reserved. PKWARE, SecureZIP, and PKZIP are registered trademarks of PKWARE, Inc. Command Variable Substitution  Allows for command customization  Permits use of template command sets  Four types of substitutions Job related, e.g. Job name, Step name System related, e.g. SMF id and LPAR id Time/Date User defined