With HFSSEC(OFF) is IBMFAC(BPX.CAHFS.*) checked?

Document ID : KB000015180
Last Modified Date : 14/02/2018
Show Technical Document Details
Introduction:

Is IBMFAC(BPX.CAHFS.*) when HFSSEC(OFF) is set?

Question:

Is IBMFAC(BPX.CAHFS.*) when HFSSEC(OFF) is set?

Answer:

With HFSSEC(ON) normal USS validation is bypassed.

With it bypassed, you use BPX.CAHFS.xxxxx controls and secures HFS functions with CA Top Secret when HFSSEC(ON). Here is the link to the doc.

https://docops.ca.com/ca-top-secret-for-z-os/16-0/en/using/controlling-access-to-the-hierarchical-file-system/secure-hfs-functions 

With HFSSEC(OFF), normal USS security resumes and checking for IBMFAC(BPX.CAHFS.*) no longer occurs.