Previous Topic: Special Program PropertiesNext Topic: Set Up SCS Address Space Security in CA ACF2 for z/OS


SCS Address Space Security Setup

The Security Setup that is required for CA CSM is only set up on the driving system. To set up the SCS address space security, do so on every target system, which can include the CA CSM driving system.

The SCS address space verifies the user ID assigned to the requesting started task or initiated job and authorizes it to connect.

Note: An unauthorized CA CSM user ID is denied access to the selected target system.

If security profiles are not defined, CA CSM cannot connect to the SCS address space, including from within the address space.

The security administrator must configure permission to access the entity SCSAS.CONNECT (READ authority) of the class CAMSM. The permission allows connections to the SCS address space through the CA CSM application server and the SCS address space.

Set up security in one of the three major external security manager (ESM) products (CA ACF2 for z/OS, CA Top Secret for z/OS, or IBM RACF) being utilized.

The following topics describe how to set up a rule to provide READ access to the entity SCSAS.CONNECT in the resource class named CAMSM. Setting up a rule to provide READ access to the entity depends on the security software you are using.