Authority Needed To Shutdown/Restart Top Secret Started Task

Products

• Top Secret

Issue/Introduction

When doing a P TSS to do a temporary shutdown of Top Secret, the following prompt is issued:

TSS9080A ENTER OPERATOR ID/PASSWORD FOR MODIFY ACCOUNTABILITY

What authorizations/permissions are need on the 'ID' specified in the reply in order to shutdown/restart the Top Secret started task (STC). Some examples of when this is needed:

• Implement changes in the Top Secret parameter file.
• Applying Top Secret maintenance.

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

The WTOR (TSS9080A) is issued when:
1) No acid is defined for the console OR
2) An acid is defined for the console but it doesn't have the CONSOLE attribute or PRIVILEG access to CASECAUT(TSSCMD.ADMIN.MODIFY).

When replying to the TSS9080A, the userid in the 'userid/password' specified needs 1 of the following to shut down Top Secret:

1) CONSOLE attribute (TSS ADD(acid) CONSOLE ).
2) PRIVILEG access to TSSCMD.ADMIN.MODIFY in the CASECAUT resource class:

TSS PER(acid) CASECAUT(TSSCMD.ADMIN.MODIFY) ACC(PRIVILEG)

Either of the above on an ACID allows the ACID to modify Top Secret control options via F TSS,xxx from the console or TSS MODIFY xxx from anywhere a TSS command can be issued (ie option 6 of TSO) as well as shutdown Top Secret.