About Resource Rules › What is CAISSF? › CA ACF2 for VM Security Interfaces

CA ACF2 for VM Security Interfaces

CAISSF is a multilayered security facility. Internally, the layers in the
CA ACF2 for VM environment include:

• Product CAISSF calls
• CAISSF router
• CA ACF2 for VM CAISSF translator
• System Request Facility (SRF) modules
• CA ACF2 for VM processing and validation routines.

Each product that uses CAISSF has calls to the CAISSF router for the services it needs to invoke. The CAISSF router determines if a security product is installed, what release is running, and then loads the appropriate CAISSF translator.

The CAISSF router is a CMS module called CAS9SEC. The CA ACF2 for VM CAISSF translator is also a module. Its name depends on the release you are running. The naming convention for the translator is CAS9pcrr), where pc is the product code and rr is the release. For CA ACF2 for VM, the product code is M9 and the current release is 4.3. That yields a translator module name of CAS9M943.

In most cases, the CA ACF2 for VM CAISSF translator converts CAISSF calls into SRF calls. For password validations without a new password, CA ACF2 for VM uses diagnose A0 subcode 4. The CA ACF2 for VM CAISSF translator makes calls to various programs that are part of the SRF and reside in the ACFSRF LOADLIB. In turn, SRF uses the built‑in processing and validation routines installed with CA ACF2 for VM. These include the routines in the control program (CP) of VM and the CA ACF2 for VM service machine.