Top Secret Commands to set up the HIS Started Task

Products

• Top Secret
• Top Secret - LDAP
• WEB ADMINISTRATOR FOR TOP SECRET

Issue/Introduction

 RACF Commands to set up HIS:

Steps for starting the HIS address space
1)  Define the HIS-started task to RACF.
To set up the HIS-started task to RACF, you must define a profile for it to the RACF generic resource class called STARTED by using the RDEFINE command.
 SETROPTS CLASSACT(STARTED)
  SETROPTS RACLIST(STARTED)
  SETROPTS GENERIC(STARTED)
  RDEFINE STARTED HIS.* STDATA(USER(HIS) TRUSTED(YES))
  SETROPTS RACLIST(STARTED) REFRESH
  SETROPTS GENERIC(STARTED) REFRESH

2)  Define a user ID for the HIS started task with an OMVS segment that specifies:
* Any UID
* A default HOME directory
   ADDUSER HIS OMVS(UID(12) HOME('/HIS'))
   SETROPTS NOCLASSACT(SECLABEL) NORACLIST(SECLABEL)
   ALTGROUP SYS1 OMVS(GID(0))

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

Create the HIS started task acid and give it the necessary OMVS segment:

TSS CREATE(HIS) TYPE(USER) PASS(xxxx,0) NAME('HIS STC ACID') DEPT(dept) FAC(STC)

Note:  Check if a group of SYS1 exists and that it has a GID of 0:
TSS LIST(SYS1) DATA(ALL)

If GROUP SYS1 does not exist then one needs to be created before adding the GROUP(SYS1):
TSS CREATE(SYS1) TYPE(GROUP) NAME('SYS1 GROUP') DEPT(dept)
TSS ADD(SYS1) GID(0)

TSS ADD(HIS) UID(xx) HOME(/HIS) GROUP(SYS1)
TSS ADD(HIS) DFLTGRP(SYS1)

Define the acid to the STC table:
TSS ADD(STC) PROCNAME(HIS) ACID(HIS)