How to override a generic SAF rule in ACF2
search cancel

How to override a generic SAF rule in ACF2

book

Article ID: 192573

calendar_today

Updated On:

Products

ACF2 ACF2 - z/OS ACF2 - MISC

Issue/Introduction

The generic rule gets picked up instead of the resource rule for Pervasive Encryption.


$KEY(****************************************) TYPE(SAF)
 UID(*) LOG
ACF75051 TOTAL RECORD LENGTH= 238 BYTES, 0 PERCENT UTILIZED,


$KEY(AES256) TYPE(SAF)
TEST.SUPPORT.999999 UID(********LOGONID)  ALLOW WHEN(CRITERIA(SMS(DSENCRYPTION)))

How can this be fixed without changing the default rule?

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

The complete resource name needs to be in the $KEY.

$KEY(AES256.TEST.SUPPORT.999999) TYPE(SAF)

  UID(********LOGONID)  ALLOW WHEN(CRITERIA(SMS(DSENCRYPTION)))