Db2 for z/OS & Db2ZAI

Db2 for z/OS and its ecosystem

Connect with Db2, Informix, Netezza, open source, and other data experts to gain value from your data, share insights, and solve problems.

 View Only
  • 1.  HOW TO CHANGE ENCRYPTION KEY LABEL FOR A DB2 ACTIVE LOG DATASETS

    Posted Tue September 02, 2025 02:06 AM
    Hi All,
     
    Can anyone tell me what is the best way to change a pervasive encryption key label from DB2 active log datasets ? Currently Active logs datasets are defined with a key label and we need to change the key label with a different one . I see only option is to define new datasets and copy the contents . is there any other option without redefining the datasets ?
     
    Thanks
     
    Amarendra Deka
     
    CSG systems Pvt Ltd
     


    ------------------------------
    Amarendra Deka
    ------------------------------


  • 2.  RE: HOW TO CHANGE ENCRYPTION KEY LABEL FOR A DB2 ACTIVE LOG DATASETS

    Posted Wed September 03, 2025 08:36 PM

    Hi Amarendra,

    We are in that same boat and that's the solution we have currently implemented in our shop as we are currently migrating from V12 to V13. But, there is a nice feature in Db2 V13 we are looking forward to taking advantage of that allows you to add/remove logs while Db2 is still online. Below is an article about this as well as the IBM documentation explaining the syntax. So if you are on V13 this may be a great option for you.

    https://www.ibm.com/docs/en/db2-for-zos/13.0.0?topic=commands-set-log-db2

    https://robertsdb2blog.blogspot.com/2024/02/db2-13-for-zos-now-you-can-dynamically.html

    I hope this helps!

    Thanks,

    Danny



    ------------------------------
    Daniel Taylor
    ------------------------------



  • 3.  RE: HOW TO CHANGE ENCRYPTION KEY LABEL FOR A DB2 ACTIVE LOG DATASETS

    Posted 18 days ago

    Thanks Danny . Yeah , we are in v13 and we have that option . 



    ------------------------------
    Amarendra Deka
    ------------------------------



  • 4.  RE: HOW TO CHANGE ENCRYPTION KEY LABEL FOR A DB2 ACTIVE LOG DATASETS

    Posted 12 days ago

    Hi Amarendra,

    The one thing I will add to Danny's response is a link to "Deleting an active log data set..."  Adding logs with the new encryption key and removing logs with the old encryption key is the way to go, just be aware of some of the nuances of removing the old logs.

    https://www.ibm.com/docs/en/db2-for-zos/13.0.0?topic=ml-deleting-active-log-data-set-from-bsds-set-log-command



    ------------------------------
    RICHARD RUPPEL
    Principal Brand Technical Specialist
    IBM
    Atlanta GA
    ------------------------------