Besides SECFILE And BACKUP, What Top Secret DD Files Are Needed On DR RES Pack

Products

• Top Secret

Issue/Introduction

1) A bootable RES-PACK was created for a Disaster Recovery (DR) site. It was done with a bare-bones TSS security file. The production Top Secret PROC has (8) additional DD statements, which identify other files. Should all of these files be cloned onto the RES-PACK as well?

The 8 additional DD Statements (besides SECFILE and BACKUP) in the production Top Secret proc are:

RECFILE 
AUDIT   
VSAMFILE
VSAMAIX 
VSMPATH 
VSAMBKUP
PARMFILE
AUTOCMDS

2) The acid doing the set up has no special Top Secret privileges. What privileges are needed to execute the tasks mentioned above?

Environment

Release : 16.0

Resolution

For question #1:

• The VSAMAIX and VSMPATH files are used when sharing the security file. NOTE: If you are not sharing the security files on the DR system, make sure SHRFILE=NO is set in the Top Secret parameter file. 
  
  
• The RECFILE and AUDIT files can be allocated new on the DR system using the sample jcl in members TSSMAINR and TSSMAINA jobs in the Top Secret 16.0 CAKOJCL0 library.
  
  
• The BACKUP and VSAMBKUP files can be allocated new on the DR system using the sample jcl in members TSSMAINB and VSAMDEF6 jobs in the Top Secret 16.0 CAKOJCL0 library. VSAMDEF6 needs to be run first, then TSSMAINB. In TSSMAINB, use the same SYSIN parameters used to allocate the SECFILE. Once the DR system comes up, issue TSS MODIFY BACKUP to take an immediate backup. The ACID that issues the TSS MODIFY BACKUP command will need either the CONSOLE attribute or PRIVILEG access to CASECAUT(TSSCMD.ADMIN.MODIFY). For example:
  
  TSS PERMIT(acid) CASECAUT(TSSCMD.ADMIN.MODIFY) ACCESS(PRIVILEG)
  
  
• The PARMFILE and AUTOCMDS files are just text datasets that should be copied if you want to use the same parameters set at startup and the same automatic (start) commands issued after Top Secret comes up at IPL time. (You can copy these and make any necessary changes on the DR system.)

For question #2:

• When allocating the new files, access to create each of the datasets is necessary. 
• No administrative authority is needed for the TSSMAINT program, which is used in the TSSMAINB, TSSMAINR, and TSSMAINA jobs.
• For the RECFILE, AUDIT, BACKUP, and VSAMBKUP files, if you are going to allocate new files on the DR system after the first IPL, to pick the files up, you will need to do a temporary shutdown and restart of Top Secret pointing to these files in the Top Secret startup proc.