How can I turn off DSN security checks for foreign tapes?
If you would like to do data set name security checking but not check the DSN for a foreign tape you can use CA-1's security options.
In CA-1 set OCEOV to YES.
In RACF set TAPEDSN to OFF
In Top Secret set control option TAPE OFF
In ACF2 set GSO options of TAPE-OPEN and TAPE-EOV to NO
With the options set this way CA-1 will issue a security check for all DSNs that are on tapes that are owned by CA-1 (in the TMC) and not for the foreign tapes.