ACID type restricted for Top Secret CONSOLE attribute
search cancel

ACID type restricted for Top Secret CONSOLE attribute

book

Article ID: 226897

calendar_today

Updated On:

Products

Top Secret

Issue/Introduction

Questions:

1) Is the TSS ADDTO(ACID) CONSOLE command for the CONSOLE attribute restricted to Top Secret administrator ACIDs (DCA,VCA,ZCA,SCA etc)?

2) Can the CONSOLE attribute be added to a PROFILE acid? Can a TYPE(USER) ACID with no Top Secret administrative authority issue TSS MODIFY or the console equivalent /F TSS... commands to alter critical Control Options 

3) Where is it documented that the CONSOLE attribute is required to shutdown Top Secret.

Environment

Release : ALL

Component :

Resolution

1) Is the TSS ADDTO(ACID) CONSOLE command for the CONSOLE attribute restricted to TSS admin acids (DCA,VCA,ZCA,SCA etc)?

Answer:

It can be added to non-admin type acids.

2) Can attribute CONSOLE be granted to a PROFILE acid? Can a  TYPE(USER) acid regular with no TSS admin authority issue TSS MODIFY or the console equivalent /F TSS... commands to alter critical Control Options 

Answer:

Yes. The CONSOLE attribute can be added to PROFILE type acid. Any acid with the CONSOLE attribute will be able to issue the TSS MODIFY commands to display or change any Top Secret Control Option.

3) Where is it documented that the CONSOLE attribute is required to shutdown Top Secret?

Answer:

Shut Down Top Secret