Addressing Security Requirements › Configure PassTickets to Connect to CA Datacom/AD or DB2 › PassTicket Configuration for CA Chorus Systems

PassTicket Configuration for CA Chorus Systems

The CA Chorus server generates PassTickets that permit users to access the various back-end products that the CA Chorus disciplines use. As users access specific components, PassTickets are generated to validate the requests.

The CA Chorus PassTicket configuration includes the following systems:

• One z/OS system running the CA Chorus Application Server and the back-end products (like CA Detector, CA Compliance Manager, CA Vantage) that are required for the CA Chorus disciplines on the same system. This type of system is a CA Chorus server system.
• Additional z/OS systems running only the products and components that are required by the CA Chorus disciplines. This type of system is known as a CA Chorus remote system.

The CA Chorus server system provides the point of entry for all CA Chorus users. Users can then access all of the CA Chorus remote systems that they have been authorized to use in your network of z/OS systems.

PassTicket configuration for the z/OS security product must be done on each z/OS system that is hosting a component that is used by CA Chorus. Configure PassTickets in your z/OS security products to enable the generation and validation of connections that are required for CA Chorus disciplines. Note the following:

• If the CA Chorus server system and the remote systems share a security database, no additional setup is required.
• If the requisite products and components exist on a remote system that does not share the security database, additional security setup is required on the remote systems.