Encryption key administration for tapes may execute the statements of the MARENEKM program (MAREN Encryption Key Manager). In other words it may administer the encryption keys for tapes.
Upon delivery, the encryption key administration for tapes privilege is assigned to the SYSMAREN ID. The security administrator can assign the privilege to any ID (except to himself/herself).
The encryption key administration for tapes privilege is addressed with TAPE-KEY-ADMINISTRATION in commands and messages and with TAPEKEYADM in macros.
The following statements can be executed with this privilege (alphabetical order):
ADD-ENCRYPTION-KEY
COPY-ENCRYPTION-KEYS
CREATE-ENCRYPTION-KEY
DELETE-KEY-BOX
EXPORT-KEY-BOX
IMPORT-KEY-BOX
MODIFY-VOLUME-ENCRYPTION-ATTR
REMOVE-ENCRYPTION-KEYS
REPAIR-KEY-BOX
SET-WRITE-ENCRYPTION-KEY
SHOW-ENCRYPTION-KEYS
SHOW-VOLUME-ENCRYPTION-ATTR