Copy secfile without TSS9123A message

Products

• Top Secret

Issue/Introduction

How to create a copy of the Top Secret Security File SECFILE without getting the TSS9123A message? 

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

There are two ways to avoid getting the TSS9123A error.

1. Copy the security file while Top Secret started task is down.

2. Copy the backup security file.

• To create a fresh SECFILE backup, issue the command: TSS MODIFY BACKUP
• Then copy the backup SECFILE.

The SECFILE should not be copied while it is active because the SECFILE is constantly being enqueued/dequeued. 

If the SECFILE was copied while it was live and enqueued, then any active enqueues will be copied along with it and will result in the TSS9123A error message.

Best practices recommend the backup security files should be copied, since the only time it is enqueued is during the TSS backup once a day in late evening or early morning.

TSS backup security files are just copies of the primary security file.

REF: 
Techdoc on TSS9123A
KB on Causes of message TSS9123A - UNABLE TO OBTAIN SECURITY FILE ENQ.