Enabling z/VM CMS File-level protection with ACF2 for z/VM

Products

• ACF2 for zVM

Issue/Introduction

 What is involved in enabling CMS File-Level Protection - is it simply setting the VMO option CMS SECURITY from NO to Yes?

 

 

Environment

Release : 12.0

Resolution

     To enable CMS file level security, there are two options available to set the CMSSEC.  This is done within the ACF2TASK Step 2: 

     - The first option is the VMXAOPTS Macro.  This option requires a re-assemble of HCPAC0.  The re-assemble is done within the step processing. 

     - The second option is the ACF2VM CONFIG file.  This file is an override of the VMXAOPTS Macro within the HCPAC0 module. This option does not require a re-assemble of HCPAC0.

     After the CMSSEC option is set to YES, generate a CMS Segment with the ACF2VM code included.

     This is also part of the ACF2TASK process.  Steps 5, 6, 7, and 8 are used to generate the necessary CMS protection.