Report on digital certificate use.

Products

• Top Secret

Issue/Introduction

Is there a report showing if a digital certificate was called/used via r_datalib RACF callable service?

Resolution

No reports are available to review, but you can use Top Secret tracing to keep track of user activity.

There are two Top Secret tracing  options: 

1. OMVSTRACE: This option can trace specific activities by an acid and/or job name. However, keeping it on for extended periods is not recommended due to processing overhead.

2. TRACE attribute: You can put the TRACE attribute on a user by running the following command:

TSS ADD(JOE) TRACE

which logs all USS activity, including certificate activity, into the SMF dataset.

Run TSSOERPT to review trace output.

Note: If SECTRACE is activated, the user's MVS SAF security activity will be traced and written to the z/OS console log.