Within the JCL for CAIRIM you need to have a CAIRACF DD that points to a data set with a translation table for the classes used by CA 1. The 2 entries are:
If CAS9 starts before RACF you will also need to change the CARIMPRM entry for CAIRIM to be:
PRODUCT(CAIRIM) VERSION(CAS9) INIT(CAS9INIT) PARM(SSF(RACF))
If you don't include the PARM the operator will be prompted to enter the name of the security product that you use. For more information please check the install guide for CA Common Services for z/OS.