Configure Security With All Security Products

To configure server security with RACF, eTrust CA-ACF2, or eTrust CA-Top Secret:

    Procedure
  1. Log on to TSO using an ID with read access to the BPX.FILEATTR.APF facility class.
  2. Using the name of the actual EDAHOME directory, change file attributes by entering the following TSO commands in ISPF Command Shell (option 6):
    OSHELL extattr +a /u/iadmin/ibi/srv93/home/bin/tscom300.out
    
    OSHELL extattr +a /u/iadmin/ibi/srv93/home/bin/tsqprx.out
  3. Verify your changes by issuing the following commands:
    OSHELL ls -E /u/iadmin/ibi/srv93/home/bin/tscom300.out
    
    OSHELL ls -E /u/iadmin/ibi/srv93/home/bin/tsqprx.out

    The extended attributes portion of the output should be a-s-.

  4. The libraries allocated to STEPLIB in IRUNJCL must be APF-authorized. Any non-APF-authorized libraries must be allocated to the TASKLIB DDNAME.
  5. Test server security by repeating the process described in Testing the New or Upgraded Installation/Configuration.