Description
The COMMAND_FILE_ENCRYPTED option specifies a data set (for z/OS) or file (for Windows and UNIX) that contains encrypted values for command parameters. Storing these parameters and their associated values in an encrypted data set / file can be used in situations where it is not desirable to explicitly specify them on the command line.
The parameters contained in the data set / file must be in their respective command line formats.
The data set referenced by the DD statement identified by ddname must be encrypted with the Universal Encrypt utility.
It is strongly recommended that any command data set / file containing sensitive data (including those that are encrypted) be further protected from unauthorized access using a native operating system security method, such as RACF.
Note
If the data set / file name is specified in this option, it should not be specified additionally with the COMMAND_FILE_PLAIN option. If it is, the command parameters contained in the data set / file name identified by COMMAND_FILE_PLAIN will be used.
Usage
Method | Syntax | IBM i | HP NonStop | UNIX | Windows | z/OS |
|---|---|---|---|---|---|---|
Command Line, Short Form | -x ddname or filename |
|
|
| ||
Command Line, Long Form | -encryptedfile ddname or filename |
|
|
| ||
Environment Variable | n/a | |||||
Configuration File Keyword | n/a |
Value
ddname (for z/OS) or filename (for UNIX and Windows) is the name of the data set or file, respectively, containing the parameters and their encrypted values.