With HFSSEC(OFF) is IBMFAC(BPX.CAHFS.*) checked?

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Is IBMFAC(BPX.CAHFS.*) when HFSSEC(OFF) is set?

Is IBMFAC(BPX.CAHFS.*) when HFSSEC(OFF) is set?

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component:

Resolution

With HFSSEC(ON) normal USS validation is bypassed.

With it bypassed, you use BPX.CAHFS.xxxxx controls and secures HFS functions with CA Top Secret when HFSSEC(ON). Here is the link to the doc.

Secure HFS Functions

With HFSSEC(OFF), normal USS security resumes and checking for IBMFAC(BPX.CAHFS.*) no longer occurs.