TSS9045I RDT Sync

Document ID : KB000103418
Last Modified Date : 26/06/2018
Show Technical Document Details
Issue:
Following the application of ptfs that include RO99650, an RDT entry has been changed that is not understood. RDT entry WBEM (resource code X'01E' was copied to X'164', original WBEM was renamed to USER001E and now have new RDT entry X'164' called WBEM. The WBEM was renamed due to conflict but we have on idea what the conflict is. 

Following messages observed in syslog: 

TSS9048I RDT SYNCHRONIZATION RENAMED WBEM USER001E DUE TO CONFLICT 
IEF196I TSS9048I RDT SYNCHRONIZATION RENAMED WBEM USER001E 
IEF196I DUE TO CONFLICT 
TSS9045I RDT SYNCHRONIZATION COMPLETE 
IEF196I TSS9045I RDT SYNCHRONIZATION COMPLETE 

In the RDT are the following:

RESOURCE CLASS = USER001E 
RESOURCE CODE = X'01E' 
ATTRIBUTE = MASKABLE,MAXOWN(26),MAXPERMIT(044),ACCESS 
ACCESS = ALL(FFFF),CONTROL(C400),UPDATE(C000),READ(4000) 
ACCESS = NONE(0000) 
DEFACC = NONE 

RESOURCE CLASS = WBEM 
RESOURCE CODE = X'164' POSIT = 604 
ATTRIBUTE = MASKABLE,MAXOWN(08),MAXPERMIT(008),ACCESS 
ACCESS = NONE(0000),CONTROL(C400),UPDATE(C000),READ(4000) 
ACCESS = ALL(FFFF) 
DEFACC = NONE
Resolution:
RO99650 adds resource class WBEM to the TSS RDT (Resource Descriptor Table) with POSIT=604 and resource code x'164'. If there is currently a user defined resource class of WBEM when RO99650 is applied, this class is renamed to USERxxxx ('xxxx' depends on the resource code). In the HOLDDATA for RO99650, it says: 

************************** 
* STEPS TO PERFORM * 
************************** 
1. LLA REFRESH and restart CA Top Secret with TSS,,,REINIT 

NOTE: the following messages will appear on the mvs console 

TSS9048I RDT SYNCHRONIZATION RENAMED WBEM USERxxxx DUE TO CONFLICT 
TSS9045I RDT SYNCHRONIZATION COMPLETE 

2. Own the necessary resources via: 
TSS ADD(dept) WBEM(CIMSERV) 

3. Permit access to CIM region control acid via: 
TSS PERMIT(CIMSERV) WBEM(CIMSERV) ACC(CONTROL) 

4. Permit access to the users, for example, CIMUSR, via: 
TSS PERMIT(CIMUSR) WBEM(CIMSERV) ACC(READ) 
*******************************

To see if there are other ownerships and permissions that need to be done for the new WBEM class, you can do the following: 

TSS WHOOWNS USER001E(*) 

For each ownership in the USER001E resource class, issue: 

TSS WHOHAS USER001E(xxxx) 

where 'xxxx' is each resource owned from the TSS WHOOWNS USER001E(*) output. 

If you are sharing a security file, then the administration only needs to be done once for all the sharing systems even though the other systems sharing may not have RO99650 applid. On the sharing systems that don't have RO99650 applied, the user defined resource class of WBEM will be renamed to USERxxxx because the update is on the security file after TSS is recycled with RO99650 applied on any of the sharing systems.