Zowe Configuration Issues With Top Secret
search cancel

Zowe Configuration Issues With Top Secret

book

Article ID: 189850

calendar_today

Updated On:

Products

Top Secret

Issue/Introduction

The Zowe Docs documentation mentions that it needs access to CSFSERV resources as follows:

TSS ADD(owner-acid) CSFSERV(profile-prefix.)
TSS PERMIT(user-acid) CSFSERV(profile-prefix.profile-suffix)

The CSFSERV resource is already in the RDT. The sample jobs for the z/OSMF set up have a list of CSFSERV permits as follows:

CSFDEC 
CSFENC 
CSFCVE 
CSFSAD 
CSFSAE 
CSFCKM 
CSFDSG 
CSFDSV 
CSFEDH 
CSFIQF 
CSFKGN 
CSFOWH 
CSFPKD 
CSFPKE 
CSFPKG 
CSFPKI 
CSFPKT 
CSFPKX 
CSFRKL 
CSFRNG

Does permitting CSFSERV(CSF) include all the CSFxxxx resources?  Are there CSFSERV resources which do not use the CSF prefix?

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

CSFSERV(CSF) includes all resource names that start with CSF. The CSFSERV resource class only allows 8 characters in the TSS PERMIT command. The Integrated Cryptographic Service Facility Administrator's Guide is located here:

Integrated Cryptographic Service Facility Administrator's Guide

In Table 35 (Resource names for ICSF callable services), Table 36 Resource names for ICSF TSO panels, utilities, and compatibility services for PCF macros) and Table 64 (Resources in the CSFSERV class for token services), all the resource names start with CSF. There were not any resource names that didn’t start with CSF.