Top Secret/ACF2 and IBM Transparent Data Migration Facility (TDMF)

Products

• ACF2 - z/OS
• Top Secret

Issue/Introduction

What setup is needed to define IBM TDMF to both ACF2 and Top Secret? What are the considerations for using TDMF to migrate the volumes that contain the security databases?   

Resolution

The only thing needed to set up TDMF is that the data sets be APF authorized and to follow instructions in the Security section of the TDMF documentation.

When moving the volumes where the ACF2 databases reside:

Give careful consideration when you migrate volumes that contain ACF2 RULES, LOGONIDS, and INFOSTG volumes with other volumes, especially if the ICKDSF TDMF parm option is requested. Volumes going through SWAP processing might start SAF authorization that in turn might require access to these ACF2 volumes. A hang might occur if these control volumes are also going through SWAP. To eliminate any form of hang, switch these data sets to their backup volumes before you migrate the primaries. If this is not possible, then migrate these volumes individually.

When moving the volumes where the Top Secret databases reside:

There are no additional considerations for migrating volumes where the Top Secret databases reside. It is not possible for Top Secret to update the volume during a TDMF volume swap, so there are no potential integrity problems with the Top Secret security files. No updates can occur on the Top Secret security files while TDMF performs the volume swap.

Additional Information

See IBM Transparent Data Migration Facility for z/OS for information regarding TDMS