RMTOPS Resource Class In Top Secret

Products

• Top Secret

Issue/Introduction

When changing RMTSEC=TABLE to RMTSEC=SAF in NetView, a resource class of RMTOPS is required with external security. How should the RMTOPS resource class be defined to the RDT (Resource Descriptor Table) in Top Secret?

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

The RACF documentation shows an example with UPDATE access, so it is recommended to start with something like this to define the resource class to Top Secret:

TSS ADD(RDT) RESCLASS(RMTOPS) RESCODE(nnn) ATTR(MASK,LONG) ACLST(ALL,UPDATE,READ,NONE) DEFACC(UPDATE)

Where ‘nnn’ is a unused resource code between x’01’ and x’3F’ or x’101’ and x’13F’.

Then own and permit the acid access to the corresponding RMTOPS resources.

The Top Secret equivalents of the RACF commands provided in the Netview documentation for allowing an operator to start remote autotasks, use the PERMIT statement with ACCESS(UPDATE) for the RMTOPS profile of the autotask are:

TSS ADD(dept) RMTOPS(NET1.CNM99.OPER01.)
TSS PER(NCCF1) RMTOPS(NET1.CNM99.OPER01.) ACCESS(UPDATE)
TSS REFRESH(NCCF1) JOBNAME(*)

The resource names are in the form of:
netid.domname.operatorid.RMTCMD
netid.domname.operatorid.ENDTASK

where:
‘netid’ is the ID of the remote network in which the operator resides
‘domname’ is the name of the remote Netview domain in which the operator resides.
‘operatorid’ is the ID of the remote operator.