HOW TO IMPLEMENT HFSSEC OPTION TO ON

Document ID : KB000025244
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

The client is planning to manage HFS file security with TSS and he is currently running some tests. He has set the HFSSEC option to ON on his test environment but he didn't succeeded on implement HFSSEC(ON),

 

Environment:

       Platform: IBM Z/OS 

       Product CA Top Secret for Z/OS 

 

Resolution:

The client has to install:

  1. ENF/USS function of CA Common Services: CCQ9E10
  2. Enable the CAIENF/USS event intercepts adding the CARRDCM0 DCM in a DCM statement in the CAIENF configuration member ENFPARM
  3. Stop/restart ENF with the COLP option: S ENF,,,COLD
  4. For best performance define a new object to VLF (Virtual Lookaside Facility). To define a new object to VLF, add an entry to the COFVLFxx member of SYS1.PARMLIB, where xx is the VLF identifier that your systems programmer assigns.

            Example: Define a New Object to VLF

             CLASS NAME(CAENFU) /* ENF/USS pathname lookup cache*/

             EMAJ(PATHCACHE) /* Required major name*/

            MAXVIRT(512) /* 512 = 2MB*/