Turn Off Secondary Resource Protection For OTRAN

Products

• Top Secret

Issue/Introduction

OTRANs in Top Secret allow for different levels of security: 

1. Single-level authorization –OTRAN Transaction ID permissioned only to Top Secret.  
2. Two-level authorization – both OTRAN Transaction ID and PPT Program have to be permissioned Top Secret.

Can there be something done at the TSS permission level to force only OTRAN Transaction ID permissioned without making software code changes?

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

OTRANs have an optional additional layer of security using either SPI resource checking or secondary resource checking. To turn off secondary resource checking: - Set PCTRESSEC=HONOR on each CICS facility you want to turn off secondary resource checking. - Set RESSEC=ASIS in the CICS System Initialization Table (SIT) - Set RESSEC=NO in the CSD entries for the transactions. To turn off SPI resource checking: - If FACMATRX=YES is set on the CICS facility in Top Secret, set XCMD=NO on the facility. No recycle of CICS should be required to pick up this change. OR - If FACMATRX=NO is set on the CICS facility in Top Secret, set XCMD=NO in the CICS System Initialization Table (SIT). A recycle of the CICS region is required to pick up this change.