CEVM SO12780 apar hold 'IPL' security protection for CEME# subsystem command questions

Products

• Compliance Event Manager

Issue/Introduction

Putting on CEVM maintenance including SO12780, there are some questions about SO12780.                

From the apar description “Implement security protection for CEME# subsystem command”, what is the CEME# subsytem command?

It looks like this is an optional enhancement, where after the apar is on sites can choose to enable ESM security?            
The apar has hold reason IPL.  So is the apar required when the apar is installed, or only before a site starts to use the enhancement? 

1) SO12780 is an enhancement and provides: "Implement security protection for CEME# subsystem command", correct ?                                         

2) "Implement security protection for CEME# subsystem command", is optional and not required, correct ?           

3) So is the IPL required when we install the apar, or only before a site starts to use the enhancement?  The SO12780 IPL is not required if a site chooses not to "Implement security protection for CEME# subsystem command", correct ?

Environment

Release : 6.0

Component : ACF2 for z/OS

Resolution

Yes, SO12780 is an enhancement and provides: "Implement security protection for CEME# subsystem command"                           

Yes/no. Without the apar applied there is no security protection for CEME# subsystem command, the command will be allowed. Once the apar is applied security protection for CEME# subsystem command is active and by default prevented(no rule no access).

Yes, an IPL is not required if apar SO12780 is applied and you choose not to "Implement security protection for CEME# subsystem command", however the command will be allowed.

Use the CEME# command at the console to disable or enable an event producer:

Syntax:
CEME# ENABLE|DISABLE(ESM)

Example: Enable the ESM Event Producer
CEME# ENABLE(ESM)

Additional Information

Details on the security protection for CEME# subsystem command can be found in section: 'Disable or Enable the ESM as an Event Producer' of the Compliance Event Manager documentation.