Receiving A 8 8 16 For An Initacee Function=Resgister Call.

Products

• Cleanup
• Datacom
• DATACOM - AD
• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware
• Top Secret
• Top Secret - LDAP
• Top Secret - VSE

Issue/Introduction

Question:

TSSOERPT shows the following entry:                                                      
                                                                          
     SERVICE      USERID    GROUP        UID         GID    SAF RC   RSN 
                                                                          
       DATE          TIME    JOBNAME   SOURCE   SYSID   CPU   SECLABEL    
                                                                          
                                                                          
                                                                          
 initACEE         GGCICST2 CICSGRP          103         101   8    8   16 
                                                                          
 03/18/09 09.077   14.42.12 GGCICST2                  MSB               
                                                                          
 Failed - User ID is not defined or attempt to delete ACEE failed         
                                                                          
  Function: Reg Cert Attribute flags: 04000000                           
                                                                          
  Userid:             Applid:                                             
                                                                          
  Password: NO   Passphrase: NO   Certificate: YES ACEE Addr: NO        

Answer:

According to the IBM RACF Callable Services Guide, a SAF RC=8, RACF RC=8 and RACF Reason Code=16 for an:

Initacee Function=Register (register a certificate)

call means that 'The userid is not authorized.'

User's must be authorized to IBMFAC(IRR.DIGTCERT.ADD) to use the 'Initacee Function=Register' RACF Callable Service.

Issue A:

TSS PER (acid) IBMFAC (IRR.DIGTCERT.ADD) ACC (READ)

to authorize the user.

Please refer to the IBM RACF Callable Services Guide for more details about 'Initacee'.

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component: