I want to use the ARCHIVE parameter of the LIST or DELETE command to build the commands that can be used to recreate the logonid, user profile records but it does not generate commands for KEYRING or CERTIFICATE Profile records, why?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

I want to use the ARCHIVE parameter of the LIST or DELETE command to build the commands that can be used to recreate the logonid, user profile records but it does not generate commands for KEYRING or CERTIFICATE Profile records, why?

Environment

Release:
Component: ACF2MS

Resolution

The INSERT, DELETE and LIST Subcommands do not include suffixed user profile records such as KEYRING and CERTDATA records when using the ARCHIVE parameter.

INSERT Subcommand

The INSERT subcommand lets a logonid with the ACCOUNT privilege level add a new logonid record to the Logonid database. Similarly, a logonid with the SECURITY privilege level can add a new user profile data record  except suffixed profile records to the Infostorage database.

LIST Subcommand

The LIST subcommand lets a logonid with the ACCOUNT, SECURITY, or AUDIT privilege display logonid records. In addition, logonids with the CONSULT or LEADER privilege can list logonids in their scope. Any user can list their logonid record. You can permit users to display other logonid records by specifying privilege fields or restrict these privileges with scope records.

A logonid with the SECURITY privilege level can display user profile data. All or specified user profile records except suffixed profile records can be displayed for a logonid or group of 

DELETE Subcommand

The DELETE subcommand lets users with the ACCOUNT privilege delete logonid records. By default, this subcommand also deletes any access rule set whose key matches that of any deleted logonid record. Additionally, this subcommand also deletes any entry for the logonid on the SYS1.BRODCAST data set. When a logonid is deleted, associated user profile records except suffixed profile records are deleted from the infostorage database.