z/OS SECURE DATA DELETE
Why is XTINCT Necessary?
Years ago, disk media inside a glass house, accessed by only a few people and password protected was considered reasonably safe. Even disaster recovery testing at offsite locations didn’t raise much concern for the safety of corporate data. After testing, many would scratch the table of contents and walk away feeling corporate data was reasonably safe. Today, however, is a different story.
Terrorism, identity theft, off-shoring, outsourcing, litigation, the Internet and the global economy have all highlighted the need for increased data protection. Governments have passed legislation such as Sarbanes-Oxley, HIPPA and Gramm-Leach-Bliley to hold corporations responsible for securing private information under their care. Beyond government standards, industry regulations such as the Payment Card Industry Data Security Standard have further defined the rules, and corporations desiring to do business with them must be in compliance. Other techniques to render the data unreadable like encryption may appear to be adequate but still not good enough for your liability insurance. Failure to comply with these standards for data protection can result in large business losses and severe penalties; so it is no longer simply a matter of due diligence to protect data under your control – it is a necessity.
XTINCT meets DOD standards for erase
XTINCT meets all the requirements of US Department of Defense 5220.22-M (Clearing and Sanitization Matrix for Clearing Magnetic Disk) by overwriting all addressable locations with a single character. XTINCT also meets the sanitization requirement by overwriting all addressable locations with a character, its complement, then a random character and verifying. For tapes, the DoD only considers degaussing or pulverizing the tape to be a valid erase. XTINCT meets the requirements of most users by overwriting the tape and use of the hi-speed data security erase patterns.
When is it necessary?
- When moving disks to another location.
- When disks come off lease and are being returned to the vendor.
- When disks are being moved to a warehouse.
- When leaving a backup/recovery site after disaster recovery testing.
- Before re-using disks for a different group within the company.
- Before scrapping disks.
Are there any free products available to Clear or purge Data?
The short answer is NO. With utilities such as IEHPROGM, individual data sets or the entire VTOC can be scratched. However, that simply removes the pointer to each data set while leaving all the data on the disk. ICKDSF can perform a MINIMAL INIT to create a label and a new VTOC, but that leaves all the data on the disk as well. A MEDIAL INIT will re-write the Home Address and record zero but may still not render data unreadable. Consequently, it will not satisfy the standard for clearing or purging. These techniques also take a VERY long time.
XTINCT: DSF/E Device Support Facilities/Extended
For all of the aforementioned reasons, DINO-Software Corporation has developed XTINCT; this software can help even the most demanding corporations meet their security needs.
- XTINCT has 5 primary commands: DISKINIT, DSINIT DSINITT, DSINITV and TAPEINIT.
- DISKINIT to erase full 3390 disk volumes.
- DSINIT to erase sequential and partitioned disk datasets.
- DSINITT to erase tape data sets.
- DSINITV to erase VSAM data sets.
- TAPEINIT to erase tape data sets.
- XTINCT is reentrant and fully supports subtasking. Up to 64 volumes can be processed asynchronously. Other tools, like ICKDSF run serially.
- XTINCT makes extensive use of channel programs. Many functions operate at peak efficiency by only using enough CPU time to generate the channel programs, with the rest of the operation being carried out by the channel subsystem. This makes XTINCT a miser when it comes to valuable CPU time.
- Control statements allow for PACING the number of concurrent operations against a string using the TASKMAX parameter. The user can run one task or many at the same time.
- XTINCT provides four levels of erasing data to satisfy the needs of even the most demanding customers.
- XTINCT provides a pattern write that reverses each bit (one’s compliment) to eliminate the possibility of reading residual data.
- To make sure that the data pattern is written to disk, XTINCT forces the storage controller to de-stage all modified tracks at the end of each pass and prior to starting the next one. This precludes a second pattern replacing the first pattern in cache and never being written to the disk, while still making efficient use of NVS and cache.
T-REX is a mainframe utility to analyze, diagnose, report, backup and repair clusters and ICF (Integrated Catalog Facility) components in a z/OS environment. T-REX was built from the ground up to incorporate the latest features and functions, making it superior to the other conglomeration of old technology in this particular […]Read More
Universal Data Manager (UDM) is a GUI based solution for managing an organization’s z/OS Storage at an Enterprise level, including, Tape Robots and Tape Catalogs, DFSMShsm, CA-Disk, ICF Catalogs, DASD Volumes, DFSMS objects, Spool data and other related objects. The overall ease of installation and automated analysis provides the controls, […]Read More
VELOCI-Raptor (VR) is an intelligent, intuitive, performance optimization tool designed to dramatically improve system performance while significantly reducing system overhead by automating tuning activities. VR assists IT departments in meeting increased service level demands and helping manage growing workloads. VR reduces overhead by optimally allocating buffers for VSAM and non-VSAM […]Read More
TERADON is an MVS utility for moving BCS entries from one ICF catalog to another. TERADON can perform its function whether the associated datasets are CLOSED or OPEN. The major differences between IBM’s REPRO MERGECAT and TERADON are: 1. TERADON can perform the REPRO MERGECAT process significantly faster. 2. TERADON […]Read More
RealTime Defrag provides automatic easily controlled z/OS DASD volume maintenance for the 24×7 operating environment, without the disruption to production schedules which legacy defrag and volume maintenance products engender, and with high throughput due to its advanced multiple address space architecture. Today the availability and reliability of your organization’s data is […]Read More
HSM Adminisaurus (HSA) is a consolidated DFSMShsm management tool for the novice or the expert that provides extensive reporting, comprehensive auditing, in-depth processing analysis, and simplified administrative functions to help you establish and maintain a healthy HSM environment. HSA allows proactive management to maximize storage utilization, optimize physical resources, and […]Read More
REORGadon (HSM/R) is a tool to address the problems and restrictions associated with batch reorganization of IBM’s Hierarchical Storage Manager (DFSMShsm) control data sets (CDS) and small data set packing data sets (SDSP). REORGadon provides HSM control data set or SDSP reorganization while the files are active and online to HSM, and […]Read More
DINO Software develops enterprise-wide, multi-platform solutions for the optimization of complex IT environments. In 2002, DINO-Software released their vanguard product, T-REX and quickly established themselves as specialists within the z/OS mainframe tech-space. DINO-Software products include VSAM record management, catalog, storage management, and disaster recovery. DINO technologists have, over the course […]Read More