Can an MSCA PERMIT itself?
search cancel

Can an MSCA PERMIT itself?

book

Article ID: 43571

calendar_today

Updated On:

Products

Top Secret Top Secret - LDAP

Issue/Introduction

Questions:

Does the MSCA (Master Security acid) have the ability to grant itself additional access?


Example: PERMIT itself a dataset. 


TSS PER(MSCA)DSN(MISSING.)ACC(ALL)

Answer:

Yes the MSCA would be able to give itself access to anything.

When you format the security file, it is the only acid on the security file when do the install.

There only can be one MSCA.

You use this acid for initial setup for all your acid and resources, so it will need to be authorized for everything administratively. It can also be used for TSS recovery. We recommend keeping the MSCA id and password in safe place. Some site keep it in a envelop and keep it in a safe. They check it in and out when needed. They change the password every time it is used.

SCA admin acids should be created and can handle 99% of the duties of the MSCA.

 

 

 

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component: