Introduction › What Does CA ACF2 for z/VM Do? › SystemWide Logon Access with One Password

SystemWide Logon Access with One Password

CA ACF2 for z/VM has facilities that let you access any virtual machine without having to know the password for each user ID. Single password access enhances security because you do not have to write down the password for each user ID you need to access. CA ACF2 for z/VM keeps track of who is accessing the virtual machine and records this information in SMF records. You can get this information by issuing ACFSERVE QUERY commands.

The facilities for single password access are:

Autolog protection facility

Allows authorized users to autolog another virtual machine without a password.

Group logon facility

Requires users to identify themselves with their own logonid and password when they log onto a designated user ID. CA ACF2 for z/VM checks the access against the resource rules to verify if the access is allowed.

LOGON‑BY

Allows a user to access another user ID by supplying his own logonid and password. Access is allowed only if the user is authorized by a resource rule.