ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

SMF 83 records and Top Secret

book

Article ID: 221656

calendar_today

Updated On:

Products

Top Secret

Issue/Introduction

Currently TOP SECRET is the security package and also being run is IBM MFA for logon with PIV .

MFA says that errors are produced in SMF83 records.

Does TOP SECRET produce these SMF 83 records?

IF NOT, how does TOP SECRET support the IBM MFA information that is produced in SMF 83 records?     

 

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

 SMF 83 records are generated by the RACF callable service R_Auditx, which is used by MFA to record security event data to SMF.

This service is handled by the SAF OE interface and will record the data using the same record type used for all other OE/USS logging events,

which defaults to type 231 but can be overridden with a TSS control option SMFTYPE. 

Since type 83 is reserved for IBM usage the override cannot use that value, it must be a number from 128 to 255.