You might want to look at the IBM Crypto Analytics Tool (CAT), offered by the excellent IBM crypto team in Denmark. It is intended to analyze your crypto system and provide a variety of reports on many things you might need for system management, compliance, etc. (including things having to do with your keys). There is a brief summary at this page, but it's quite old and I'm sure there is more current information somewhere: http://www-05.ibm.com/dk/security/cccc/products/ekmp-cat.html
Here is some summary information from that web page: "The IBM Crypto Analytics Tool (CAT) is part of the IBM Enterprise Key Management Foundation EKMF) and has been developed to help provide up-to-date monitoring of crypto related information on the z Systems in the enterprise. CAT is designed to combine and present crypto information in a way that helps ensure compliance and policy enforcement. The CAT Agent collects cryptographic information across the enterprise that is then made available to the CAT Monitor running on your desktop. The CAT Monitor provides overviews, queries and reports to better manage the cryptographic setup. ... CAT is designed to provide fast, reliable crypto information to help people in different roles of the organization make qualified decisions about crypto systems. CAT collects cryptographic information from across the enterprise and ensures that each crypto system is following best practices by providing: -A comprehensive overview of the cryptographic security of the system. -Up-to-date monitoring of crypto keys and functions. -Key data for better policy and compliance enforcement. -Awareness if key material used in testing has leaked into production environments. -A comparison of the current crypto state with a previous 'snapshot' for error and problem determination or change control validation." Questions about CAT can be addressed to the Denmark team at [email protected]. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
