Getting Started with Linux on Z Encryption for Data At-Rest

Planning for Linux on Z data at-rest encryption

This chapter describes planning considerations for implementing Linux on Z data at-rest encryption from several perspectives. It includes the following topics:

•3.1, “Creating an implementation plan” on page 22

•3.2, “Know where your sensitive data is stored” on page 23

•3.3, “Encryption considerations” on page 23

•3.4, “Considerations for separation of duties” on page 25

•3.5, “Policy considerations” on page 26

•3.6, “Key management considerations” on page 29

•3.7, “z/VM considerations” on page 36 ...