After Disk PTF LU20508 message 4683 or U0200

Products

• DISK BACKUP AND RESTORE
• Disk Backup and Restore - MVS
• DISK BACKUP AND RESTORE FOR MSP
• DISK BACKUP AND RESTORE- ADD-ON OPTIO

Issue/Introduction

After applying PTF LU20508, message 4683 PARMLIB SECURITY IS DISABLED. THE ABILITY TO DISABLE PARMLIB SECURITY WILL BE DEPRECATED IN THE NEXT RELEASE,   may be issued.

After updating PARMAUTH SECURITY=YES and USERMOD5 is applied these messages

ADSTS148 3184 YOU ARE RUNNING WITH AN UNAUTHORIZED CA DISK <DSN>
ADSTS148 3184 RERUN WITH AUTHORIZED PARMLIB SYS1.PARMLIB        
ADSTS148 3184 OR

ADSTS148 3184 ABEND 200       

 

may be issued as well.

Resolution

 

To stop this message, a customer should begin by reading the recommendations in the Disk Backup and Restore technical documentation under Configure Your Product -> Activate Miscellaneous Security Features  

 

 

The high level actions required to enable PARMLIB security are the following:

• Copy the sample PARMAUTH in CCUWSAMP as a starting point for your customized changes.
• Update the copied PARMAUTH to specify the PARMLIBs used in your Disk environment where ZDMSPARM will reside and SECURITY=YES.
• Copy SAMPZDMS in CCUWPARM to your PARMLIB used for Disk and rename the member to ZDMSPARM.
• Update USERMOD5 in CCUWJCL and update USERASM DD to the data set containing your customized PARMAUTH source.
• Run the updated USERMOD5 to apply USERMOD SDU1815 to your Disk environment.

The 4683 message is issued if your PARMAUTH specifies the default of SECURITY=NO. Disk Backup & Restore functions should be restricted to authorized Storage Administrators, which starts by enabling security on the PARMLIB to prevent authorized overrides of various SYSPARMs.

Restricting functions to Storage Administrators beyond the initial step of enabling PARMLIB security will require additional follow-up actions as explained in the technical documentation.    

Additional Information

When applying LU20508 these are the steps required to implement the PTF:                                 
                                                                     
 If you had disabled PARMLIB security then the new 4683 message will  be displayed when Disk is used, including the ISPF interface.  To   
 avoid the message 4683, enable PARMLIB security by performing the following steps:                                                    
                                                                     
 Step 1 - SMPE RESTORE of the usermod SDU1815.                       
 Step 2 - Make a backup of the current PARMAUTH in CCUWSAMP.         
 Step 3 - Modify PARMAUTH in CCUWSAMP to specify SECURITY=YES and SECURLIB= the data set containing the names of all the                       Disk PARMLIBs.                                             
 Step 4 - RE-APPLY the usermod SDU1815