ACF2 maintenance with SOURCEID(SECINT)

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• LDAP SERVER FOR Z/OS
• PAM CLIENT FOR LINUX ON MAINFRAME
• WEB ADMINISTRATOR FOR TOP SECRET

Issue/Introduction

We applied IBM security maintenance, sourceid(secint), then discovered some ACF2 maintenance got applied as well; for example, SO14108. This did not make sense to me so I listed the info for the ptfs and saw this:

SOURCEID CAP2008    
         ORD00994   
         PRP        
         SECINT     
APPID    MVSSCD     

Is CA now using SOURCEID(SECINT)? If so, when did it start? And finally, how do we get notified? IBM sends us a list of security ptfs and we run a job to assign the security tag so I just need to understand the CA process.

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

Yes, ACF2 is now using the SOURCEID(SECINT) field in PTFs.

It started with PTF SO14108.

As of right now there is not a way to notify about SOURCEID(SECINT). Working on a way to notify customers.

There will be a list of products, and select what notifications are wanted for each product. Currently working on adding SOURCEID(SECINT) to the Security Advisories notifications.