eTrust CA-Top Secret Security for z/OS and OS ... - SupportConnect

Defining the Sysplex to eTrust CA-Top SecretTo secure access to the IXCMIAPU utility using eTrust CA-Top Secret you mustestablish ownership of the resource and permit the required access to a policy asshown next.Establish ownership of the resource:TSS ADDTO(dept) IBMFAC(MVSADMIN)Permit required access to a policy:TSS PERMIT(user) IBMFAC(MVSADMIN.XCF.ARM) ACCESS(READ | UPDATE)TSS PERMIT(user) IBMFAC(MVSADMIN.XCF.CFRM) ACCESS(READ | UPDATE)TSS PERMIT(user) IBMFAC(MVSADMIN.XCF.LOGR) ACCESS(READ | UPDATE)TSS PERMIT(user) IBMFAC(MVSADMIN.XCF.SFM) ACCESS(READ | UPDATE)Two access levels are available for these resources:READ—Report only on a policyUPDATE—Alter and maintain a policyDefining the Sysplex to eTrust CA-Top SecretDefining the sysplex environment to eTrust CA-Top Secret is easy to do. To usethe XCF or XES feature, the SYSPLEX control option must be entered. Thiscontrol option contains the information necessary for eTrust CA-Top Secret tocommunicate with the sysplex using the proper structure and group names.For more details, see the Control Options Guide.Managing the Coupling FacilityOS/390 and eTrust CA-Top Secret use the definitions in the Coupling FacilityResource Management (CFRM) policy when managing the Coupling Facilitystorage. The CFRM policy resides in a CFRM couple data set which the systemprogrammer creates using the IBM IXCL1DSU format utility program. To createthe administrative CFRM policies, the systems programmer uses the IBM utilityprogram IXCMIAPU. You can activate, change or rebuild the CFRM policy usingthe OS/390 operator command SETXCF.3–6 Cookbook