eTrust CA-Top Secret Security for z/OS and OS ... - SupportConnect

Using TCP/IPwheresysname is the name of the systemtcpipid is the name of the TCP/IP started tasknetname is the network name in PROFILE.TCPIPportname is the port name in PROFILE.TCPIPnnnn is the port number with leading zero'sSee the IBM OS/390 V2R10 IP Configuration Guide for additional informationabout these functions.Support for the SERVAUTH class is available beginning with eTrust CA-TopSecret 5.1 SP04. For earlier maintenance levels, you must apply APAR LO82040,which is required when using OS/390 2.10. This APAR adds an internal RDTentry for SERVAUTH. You must add rules giving READ access to theSERVAUTH resources to acids that require access. If no rule allowing accessexists, you can receive several different error messages, including:EDC5111I permission deniedThe EZB.STACKACCESS violation is seen on all systems running OS/390 2.10that do not have rules allowing access. Calls for the other three functions are notmade unless additional setup is done in PROFILE.TCPIP. See the IBM OS/390V2R10 IP Configuration Guide for additional information.To allow access to these resources, issue the following commands to define theresource to eTrust CA-Top Secret:TSS ADD(dept) SERVAUTH(EZB.)TSS PER(dept) SERVAUTH(EZB.STACKACCESS.) ACC(READ)TSS PER(dept) SERVAUTH(EZB.NETACCESS.) ACC(READ)TSS PER(dept) SERVAUTH(EZB.PORTACCESS.) ACC(READ)TSS PER(dept) SERVAUTH(EZB.TN3270.) ACC(READ)VMCF and TNF subsystems (eTrust CA-Top Secret started before JES)If a restartable VMCF and TNF subsystems are to be used, add to the eTrustCA-Top Secret STC table the following started task entries: VMCF, TNF,EZAZSSI.TSS ADD(STC) PROCNAME(VMCF) ACID(acid)TSS ADD(STC) PROCNAME(TNF) ACID(acid)The acids associated with these STCs require access to facility STC and data sethlq SEZATCP.TSS ADD(dept) DSNC(SEZATCP.)TSS PER(acid) DSN(SEZATCP.) ALL(READ)Implementing eTrust CA-Top Secret in a z/OS or OS/390 Environment 1–31