How to APF-Authorize JCLCheck in TSO?

Products

• JCLCheck Workload Automation

Issue/Introduction

JCLCheck has many features that requires it to run as an APF-authorized task. This Knowledge Document shows how to APF-authorize JCLCheck in TSO, how to verify that JCLCheck is APF-authorized, and how to avoid losing APF authorization.

 

 

Environment

Release:  All
Component: JCLCheck Workload Automation

Resolution

 To satisfy the APF authorization requirements for JCLCheck, do one of the following:

• Add the JCLCheck load library (CAZ2LOAD) to the SYS1.PARMLIB(IEAAPFnn) list or to the linklist (LNKLSTxx)

• Copy the JCLCheck load modules to an APF-authorized library using JCL member J6C0CAPF in the JCLCheck CAZ2JCL data set or to a linklisted library.

To satisfy the APF authorization requirements for JCLCheck in TSO/ISPF mode, do the following:

• Add the following entries to SYS1.PARMLIB(IKJTSOnn): 

• CAZ2CTSO in the AUTHTSF table.

• JCLCHECK in the AUTHCMD table.

• JCLCHECK in the AUTHPGM table.

                       Note: The IKJTSOnn tables can be updated without an IPL by using the TSO PARMLIB UPDATE(nn) command.

To verify that JCLCheck has satisfied the APF requirements, do the following:

• Execute JCLCheck CLIST CAZ1TSF from the CAZ2CLS0 library.  Expected results:  
  
  CAZ1TSF - JCLCHECK AUTHTSF ENTRY 'CAZ2CTSO' FOUND 
  CAZ1TSF - JCLCHECK AUTHCMD ENTRY 'JCLCHECK' FOUND 
  CAZ1TSF - JCLCHECK AUTHPGM ENTRY 'JCLCHECK' FOUND 
  *** 

• Review the JCLCheck job execution log and locate the Environment Array field. Example: 
  
  ENVIRONMENT ARRAY: SHAT00000000000000000

                      S means that SMS is enabled. 
                      H means that HCD is enabled; if not APF, this bit is 0. 
                      A means that JCLCheck is APF-authorized; if not APF, this bit is 0.

APF authorization is lost if the JCLCheck load library CAZ2LOAD is concatenated with a non APF library in a STEPLIB DD.