TSSHCK21E Top Secret Security File caching features are not optimally configured

Products

• Top Secret

Issue/Introduction

What does the following mean?

HZS0002E CHECK(TOP_SECRET,TOP_SECRET_CACHE_STATUS): 569
TSSHCK21E The Top Secret Security File caching features are not optimally configured.

Resolution

Top Secret is now integrated with the IBM Health Checker for z/OS through the Health Checker Common Service, and automatically checks the following Top Secret settings:

• Checks that there is not a conflict with the placement of the Top Secret Audit Tracking File and the Security File, which reduces the number of support issues resulting from performance degradation when these two files share a DASD volume.
  
  
• Checks that the Top Secret CACHE and SECCACHE features are enabled, which prevents performance degradation and support issues as a result of clients not using all of the product-supplied cache features.

This will require you to have the proper Common Services maintenance installed as well.

Additional information can be found in the Health Check output in SDSF. For example:

********************************* TOP OF DATA *******************************
CHECK(CA_TOP_SECRET,TOP_SECRET_CACHE_STATUS) START TIME: 07/05/2010 13:02:55.310917 CHECK DATE: 20100101 
CHECK SEVERITY: MEDIUM THE CA TOP SECRET SECCACHE FEATURE IS NOT ACTIVE 
* Medium Severity Exception * 
TSSHCK21E The CA-Top Secret Security File caching features are not optimally configured.

Explanation: Top Secret Security is not performing optimally because the CACHE and/or SECCACHE features are disabled. Top Secret allows for the specification of two separate caching features which are enabled via the CACHE and SECCACHE control options. Both of these features are highly reliable and provide for the best possible performance of the product. Without these features enabled sites may be subject to performance degradation especially when the Security File is shared across multiple systems.

System Action: Top Secret continues processing.

Operator Response: Report this error to the System Programmer.

System Programmer Response: Implement the Top Secret CACHE and SECCACHE features appropriately. Both of these cache features are dynamically configurable and so may be enabled without a recycle of CA Top Secret.

To Enable the CACHE feature use the CACHE control option as follows:

TSS MODI(CACHE(nnnn)) nnnn is the size of the memory cache in kilobytes.

To Enable the SECCACHE feature use the CACHE control option as follows:

TSS MODI(SECCACHE(SIZE=mmmm,INDEX=nnnnnn,EXP=hhh,WARN=ppp)) 

where:
mmmm is the size of the memory cache in megabytes.
nnnnnn is the number of index entries. 
hhh is the expiration interval for cache records in hours. 
ppp is the threshold percentage full when a warning message will be issued.