How can we filter to TSSUTIL report for logged CA Top Secret commands?

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Is there a way to log Top Secret commands to the SMF file or Audit/Tracking file?

Environment

z/OS

Resolution

Yes. Top Secret 16.0 PTF RO95026 introduced an enhancement that add logging of commands that change information on the security file to the SMF file and/or Audit/Tracking file via new control option LOG(CMDS) and/or LOG(CMDA). Use CLASS(O) in the REPORT statement to report on these commands. 

Here is an example of a TSSUTIL job with CLASS(O):

//TSSUTILA     PROC     PRINT='*',     /* SYSOUT O/P DESTINATION     */    
//                   HL='CAI.TSS160'         /* HIGH LEVEL QUALIFIER       */
//*
//TSSUTIL      EXEC    PGM=TSSUTIL 
//UTILOUT      DD       SYSOUT=&PRINT 
//SMFIN         DD       DISP=SHR,DSN=&HL..AUDIT 
//UTILIN        DD       DDNAME=TSSIN       
//                  PEND    
//* 
//REPORTS     EXEC     TSSUTILA    
//TSSIN          DD       *  
REPORT EVENT(ALL) DATE(TODAY) CLASS(O) END       
/*

Additional Information

Refer to TEC1626173 "Where can you see layout of SMF records for CA Top Secret commands for Control Options LOG(CMDS) ?"

TEC1626173