ACEE Protection more infos
Article ID: 136831
Updated On:
Products
Disk Backup and Restore - MVS
DISK BACKUP AND RESTORE- ADD-ON OPTIO
DISK BACKUP AND RESTORE
Issue/Introduction
Where to find an explanation or more details about the note regarding ACEE protection using RACF's ACEECHK that is listed in the z/OS Compatibility Matrix for CA Disk 12.5 on z/OS.V2R4 under link -
https://ftpdocs.broadcom.com/phpdocs/0/MSPSaccount/COMPAT/zos_compat.HTML :
If you have elected to enable ACEE protection using RACF's ACEECHK, you also need to add CA Disk to the exclusion list.
The ACEE is modified for System Administration mode and other Auto-Restore functions.
https://ftpdocs.broadcom.com/phpdocs/0/MSPSaccount/COMPAT/zos_compat.HTML :
If you have elected to enable ACEE protection using RACF's ACEECHK, you also need to add CA Disk to the exclusion list.
The ACEE is modified for System Administration mode and other Auto-Restore functions.
Environment
Release : 12.5
Component : CA Disk Backup and Restore
Resolution
The ACEE protection is not activated by default in RACF, so if it is not activated, you are not concerned.
If your site has enabled the RACF ACEE with SETROPTS CLASSACT(ACEECHK) and you also plan to enable CA Disk USERMOD5,
then be aware that message IRR421I will be issued for each step in a CA Disk job.
Sample message:
IRR421I ACEE modification detected for user XXXX in address space ID 0x0000003E running under user XXXXX and job name IVP01RPT while program ADSMI002 is running.
The RACF function detecting the modification is IRRRCK00.
Rsn=0x40000000. (ACEEPRIV is ON). Occurrences 1.
Resource=WWWWW.STG.DISK.IVP.PDS(DATASET). Call chain: ADSMI002
See message IRR421I -
https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.4.0/com.ibm.zos.v2r4.icha600/irr421i.htm
To except the CA Disk library from ACEE check, make it a trusted library and suppress the IRR421I message via RALTER PROGRAM * ADDMEM('CAI.CCUWLOAD'/volser/NOPADCHK) UACC(ALTER).
This is documented in chapter "Install CA Disk Under IBM RACF" of the CA Disk docu at link -
https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-mainframe-software/performance-and-storage/ca-disk-backup-and-restore/12-5/installing/install-ca-disk-under-ibm-racf.html
Top Secret does not Support ACEECHK and there are no details of when it might support it.
If your site has enabled the RACF ACEE with SETROPTS CLASSACT(ACEECHK) and you also plan to enable CA Disk USERMOD5,
then be aware that message IRR421I will be issued for each step in a CA Disk job.
Sample message:
IRR421I ACEE modification detected for user XXXX in address space ID 0x0000003E running under user XXXXX and job name IVP01RPT while program ADSMI002 is running.
The RACF function detecting the modification is IRRRCK00.
Rsn=0x40000000. (ACEEPRIV is ON). Occurrences 1.
Resource=WWWWW.STG.DISK.IVP.PDS(DATASET). Call chain: ADSMI002
See message IRR421I -
https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.4.0/com.ibm.zos.v2r4.icha600/irr421i.htm
To except the CA Disk library from ACEE check, make it a trusted library and suppress the IRR421I message via RALTER PROGRAM * ADDMEM('CAI.CCUWLOAD'/volser/NOPADCHK) UACC(ALTER).
This is documented in chapter "Install CA Disk Under IBM RACF" of the CA Disk docu at link -
https://techdocs.broadcom.com/content/broadcom/techdocs/us/en/ca-mainframe-software/performance-and-storage/ca-disk-backup-and-restore/12-5/installing/install-ca-disk-under-ibm-racf.html
Top Secret does not Support ACEECHK and there are no details of when it might support it.
Feedback
Yes
No
Powered by
