Disabling External Security for a Datacom MUF

Products

• Datacom
• Datacom/AD
• Datacom/DB

Issue/Introduction

We are having some difficulties with setting up External Security in our MUF. While we try to fix this, how do we disable External Security so the MUF will start? 

Is there anything else need to be done other than commenting the SECURITY parms in the AXDATIN1 MUF Startup Options? 

Environment

Release : 15.1

Component : Datacom/DB

Component : Datacom/AD

Resolution

At the highest level, External Security for Datacom is enabled when two different security permissions are used:

1. Your MUF userid is granted access to the DTSYSTEM resource profile (DTS for ACF2, or DT@YSTEM for RACF) or rule called ACTIVATE.LEVEL05.PASS and
2. Your MUF userid is denied access to the ACTIVATE.LEVEL05.FAIL profile/rule.

The easiest way to turn off the use of External Security for a single MUF is to remove that MUF userid from the ACTIVATE.LEVEL05.PASS rule/profile, or to permit access NONE.

For Top Secret, you could use: PER(<your MUF user>) DTSYSTEM(ACTIVATE.LEVEL05.PASS) ACCESS(NONE)

For ACF2, you could use: SET RESOURCE(DTS); RECKEY ACTIVATE ADD(LEVEL05.PASS UID(<your MUF user UID>) PREVENT) 

For RACF, you could use: PE ACTIVATE.LEVEL05.PASS CLASS(DT@YSTEM) ID(<your MUF user>) ACC(NONE)

This would leave the userid in the ACL with no access, so others could see that you have turned off security in this MUF. You should then be able to start the MUF successfully.

Additional Information

As always, please contact Broadcom support for Datacom if you have further questions.