500 HandsonLab z Cryptography and Security Choose Your Own Lab Adventure
Project and Program:
Service Delivery
Tags:
Proceedings,
2025,
SHARE Cleveland 2025
***** Lab 1 Data Set Encryption: With the recent PCI DSS 4.0 requirement which
states that volume-level encryption is no longer sufficient to protect
cardholder data, many enterprises are now seeking to implement data set
encryption to remain compliant. This lab allows you to try out data set
encryption for yourself. Learn how to generate cryptographic keys and manage the
data set encryption policy. See how to authorize data owners vs storage admins.
Then read, write, and print an encrypted data set. ***** Lab 2 Key Management
and Rotation: Encryption is easy. Key management is hard. Now that many
customers have implemented data set encryption, many are battling the challenges
of key management and rotation. This lab will introduce you to the fundamental
concepts of key management within the context of a data set encryption key. We
will explore different methods of generating cryptographic keys. You will learn
how to use the CKDS KEYS panel utility to browse and manage keys in the CKDS,
add metadata to keys, and establish and enforce key validity dates. We will
archive old keys such that they can only be used to decrypt old data, and rotate
to a new key to encrypt new data, completing the key lifecycle. In the end, we
will look at the full lifecycle of our keys via audit records. ***** Lab 3 zSCC:
The ability to demonstrate regulatory compliance within enterprise systems is a
critical aspect of ensuring data security and maintaining industry standards.
The IBM Z Security and Compliance Center offers an effective solution for
streamlining and accelerating the process of showcasing regulatory compliance
posture. This hands-on lab aims to provide participants with an end-to-end
understanding of the IBM Z Security and Compliance Center solution, enabling
them to quickly build the solution to streamline regulatory compliance
processes, monitor security risks, and prepare for audits effectively.
Back to Proceedings File Library