This document is the first in a series of articles that summarize what is required to implement external security for Datacom using one of the three external security products, ACF2, TopSecret, or RACF. Full documentation on this functionality is published in the Datacom/DB Security Guide. This document describes the prerequisites and what they are used for.
Release: Datacom
The following products or sub-components must be defined before you begin to implement external security for Datacom:
CAIRIM - A component of Common Services (for z/OS) or CIS (for z/VSE).
This component should have been installed prior to installing Datacom/DB or Datacom/AD. CAIRIM is how you can define the SVC which defines the Multi-User being used.
CAISSF - Is a subservice of CAIRIM, and provides the link between the Advantage Datacom products and the external security product. For RACF define the Command CA@MD (by default).
CAIIPC - CA Inter-Product Components is required for Datadictionary (and Advantage Ideal) online Signons.
You must use the SC00OPTS SECRTY=Y , if you want UserIDs and Passwords validated by the external security product. This parameter must be "Y" the default is "N".
ACF2, TopSecret, or RACF - Installing one of the three external security products at current releases.
MUF authorized - The Multi-User Facility (MUF) must run authorized if using external security in a z/OS environments. Ensure that all libraries in the concatenation be in an authorized state. Note that starting with Release 12, Multi-User must run authorized regardless of whether external security is in place or not.
DBCVTPR - Modify DBCVTPR USERID= parameter. The DBCVTPR USERID parameter governs format of the UserID that is passed to Datacom with each online request.