How to override a generic SAF rule in ACF2

book

Article ID: 192573

calendar_today

Updated On:

Products

CA ACF2 CA ACF2 - z/OS CA ACF2 - MISC

Issue/Introduction

The generic rule gets picked up instead of the resource rule for Pervasive Encryption.


$KEY(****************************************) TYPE(SAF)
 UID(*) LOG
ACF75051 TOTAL RECORD LENGTH= 238 BYTES, 0 PERCENT UTILIZED,


$KEY(AES256) TYPE(SAF)
 PRD.SUPPORT.06022020 UID(********SYSPROG)  ALLOW WHEN(CRITERIA(SMS(DSENCRYPTION)))

How can this be fixed without changing the default rule?

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

The complete resource name needs to be in the $KEY.

$KEY(AES256.PRD.SUPPORT.06022020) TYPE(SAF)
  UID(********SYSPROG)  ALLOW WHEN(CRITERIA(SMS(DSENCRYPTION)))