Define Datacom/AD security rules for CA 7

Products

• Datacom
• Datacom/AD
• CA 7 Workload Automation

Issue/Introduction

This article explains how to implement external security in the Datacom/AD Multi-User (MUF) used by CA 7 Workload Automation.

CA 7 uses DBID 770 as Datacom database identifier.

Environment

z/OS

 

Resolution

Datacom/AD security for CA 7 is documented in the Datacom/AD documentation in section Datacom Security in CA 7. Add the SECURITY Datacom startup options once the RACF, TSS, or ACF2 rules are established.

Other Security topics related to CA 7 are explained in the CA 7 documentation section Securing.

Datacom Security is activated via the following two MUF startup parameters: 

SECURITY DBDCSCI,DBDCSCQ,DBDCRCI,DBDCRCQ,DBDCRAQ 
SECURITY DBDCSSR,DBDCRSR,DBDCSQL,DBDCSQQ,DBDCRAT 

You can comment them out until you are ready to activate the Datacom Security by adding an '*' in front like this:

* SECURITY DBDCSCI,DBDCSCQ,DBDCRCI,DBCRCQ,DBDCRAQ
* SECURITY DBDCSSR,DBDCRSR,DBDCSQL,DBDCSQQ,DBDCRAT 

Then you will need the help of a Security Administrator. 

If you are an ACF2 site then review these CA 7 CAL2OPTN library members: 

• AL2ACF2D - CA ACF2 Security Definitions for CA Datacom access 
• AL2ACF2N - CA ACF2 Security Definitions for new CA 7 Commands 
• AL2ACF2S - Sample CA ACF2 Security definitions for CA 7 

If you are a RACF site then review these CA 7 CAL2OPTN library members: 

• AL2RACFD - RACF Security Definitions for CA Datacom access 
• AL2RACFN - RACF Security Definitions for new CA 7 Commands 
• AL2RACFS - RACF sample security definitions for CA 7 

If you are a TSS site then review these CA 7 CAL2OPTN library members:

• AL2TSSD - CA Top Secret Security Definitions for CA Datacom access 
• AL2TSSN - CA Top Secret Security Definitions for new CA 7 Commands 
• AL2TSSS - CA Top Secret Security Definitions for new CA 7 Commands 

Once the rules are established by your Security Administrator, you may un-comment the two MUF startup SECURITY parameters (by removing the '*' in front of the two SECURITY cards). 

Additional Information

See the CA 7 documentation section Secure the Datacom/AD MUF and the Datacom/DB documentation section Using External Security for Datacom.

Refer to your Security product documentation (TSS, RACF or ACF2) for any rules you need to add.

Also make sure you have applied CA 7 12.0 PTF RO97693 (SAMPLE SECURITY RULE UPDATES) , if you run CA 7 version 12.0 , which updates the AL2xxxxx members listed previously.