Voltage SecureData z/Protect

The architecture of Voltage SecureData z/Protect comprises several key components. The API component provides interfaces for application-level encryption, allowing developers to integrate encryption functions into COBOL and other Language Environment applications. The z/FPE (z/File Protection Engine) is a utility designed for bulk data encryption within DB2, CICS, IMS, and VSAM datasets.

Key management services handle the generation, storage, and rotation of encryption keys. These components communicate using the z/OS operating system's internal mechanisms and network protocols. The product utilizes the z/OS environment for storage, including datasets for storing encrypted data and key management information.

Network requirements include the standard ports and protocols supported by the z/OS environment. The API supports various methods for encryption and decryption, with specific parameters for key selection and data handling. The z/FPE utility uses configuration files to specify the datasets to be encrypted and the associated encryption keys.

The product supports RBAC with role-based permissions. Audit logs record all encryption activities, including user actions and data access. The product integrates with other Voltage SecureData products for end-to-end encryption across different platforms.

The main competing products include IBM Security z/OS Encryption Facility. A key differentiator is the z/FPE tool, which simplifies bulk data encryption tasks.