eTrust CA-Top Secret Security for z/OS and OS ... - SupportConnect

Defining SYSTEM LOGGER to eTrust CA-Top SecretSetting up the OS/390 CICS log manager with eTrust CA-Top Secret involves thefollowing steps:Step 1—Follow substep A or B to define the IXGLOGE address space and therequired SAF authorizations.■Define IXGLOGR in the Started Task table to bypass SAF calls:or■TSS ADD(STC) PROCNAME(IXGLOGR) ACID(BYPASS)This bypasses all SAF calls and, therefore, does not require additionalresource permits.Define IXGLOGR in the Started Task table:TSS ADD(STC) PROCNAME(IXGLOGR) ACID(ixglogr)Permit access to the log stream coupling facility structures.TSS ADD(dept) IBMFAC(IXLSTR.structure_name)TSS PER(ixglogr) IBMFAC(IXLSTR.structure_name) ACCESS(ALL)Permit access to the DASD log stream and staging data sets.TSS ADD(dept) DSNAME(hlq.data_set_name)TSS PER(ixglogr) DSNAME(hlq.data_set_name) ACCESS(ALL)The default hlq is IXGLOGR if none is specified on the HLQ parm of theDEFINE LOGSTREAM statement.Permit access to the systems SYSx.PARMLIBTSS ADD(dept) DSNAME(SYS1.PARMLIB)TSS PER(ixglogr) DSNAME(SYS1.PARMLIB) ACCESS(READ)Step 2—Control which applications can access the system logger resources.For logrec log stream, CICS log manager, and OPERLOG system loggerapplication, define access to the log stream.TSS ADD(dept) LOGSTRM(log_stream_name)TSS PER(acid) LOGSTRM(log_stream_name) ACCESS(UPDATE)Step 3—Authorize who can use the IXCMIAPU utility.Define authorizations to use IXCMIAPU.TSS ADD(dept) IBMFAC(MVSADMIN.)TSS PER(acid) IBMFAC(MVSADMIN.) ACCESS(ALL)