A CAS9034E message may be generated when using CA-7 resource class(es) after converting to RACF

Products

• COMMON SERVICES FOR Z/OS

Issue/Introduction

Converting from Top Secret security to RACF security.  Attempts to use CA-7 resources result in error message CAS9034E.

Environment

Release : 15.0
Component : CAIRIM

Cause

Necessary changes to CAS9 proc and CA-7 are required for this conversion; both were not completed. 

Resolution

Although the CAIRACF requirements were completed, the necessary RACF requirements for CA-7 were not met. 

•     The resource classes that are required by CA WA CA 7 Edition are PA@EL and SU@MIT.     
  •    Add them to the CAIRACF DD  CAW0OPTN(RACFLIST) listed in the Common Services CAS9 proc
  •    CA-7 requires that they also be added to the the IBM class descriptor macro ICHERCDE found in SYS1.MODGEN

Additional Information

Refer to CA-7 Knowledge article 21020 for information on the cause and correction of the CAS9034E message 
Refer to the RACF Requirements in the Workload Automation CA-7 documentation
Refer to the description of the CAIRACF CAW0OPTN(RACFLIST) in the Common Services Documentation