Restricting DESKELBL keyword usage in JCL

Products

• Top Secret

Issue/Introduction

How to prevent or secure DESKEYLBL JCL parameter usage in JCL.

Resolution

To prevent any user  in TSS from specifying DSKEYLBL in the JCL:

TSS PER(ALL) IBMFAC(STGADMIN.SMS.ALLOW..ENCRYPT) ACCESS(NONE)