How to Set Up Security for CA CSM with IBM RACF › How to Set Up SCS Address Space Security › Configure Pass Tickets › Example: Configure PassTickets for SCS Address Space on Remote Systems

Example: Configure PassTickets for SCS Address Space on Remote Systems

You can use IBM RACF to configure PassTickets on the remote systems where the SCS address space is running.

Follow these steps:

1. Enter the following commands to activate the PassTicket class:

   SETROPTS CLASSACT(PTKTDATA) 
   SETROPTS RACLIST(PTKTDATA) 
   

2. Enter the following command to define a profile for the application and specify the session key:

   RDEFINE PTKTDATA MSMCAPPL SSIGNON(KEYMASKED(0123456789ABCDEF)) UACC(NONE)
   

   MSMCAPPL

   Defines the session key for the SCS address space ID used during CA CSM Configuration processing. This name may have been overridden when you installed CA CSM, so it should reflect the real application name.

   Note: This example demonstrates a complete session key value of 16 hex digits (creating an 8-byte or 64-bit key). Change your key so that it consists of 16 random hex digits, and is different from the values shown in this example. Each application key must be the same on all systems in the configuration, and the values must be kept secret and secured.

3. Enter the following command to permit access to the MSMCAPPL PassTicket session key value for the SCS address space Started Task user ID:

   RDEFINE IRRPTAUTH.MSMCAPPL.stc-userid CLASS(PTKTDATA) UACC(NONE) 
   

   stc-userid

   Specifies the SCS address space Started Task user ID.

4. Enter the following command to refresh the PTKTDATA class:

   SETROPTS RACLIST(PTKTDATA) REFRESH
   

You completed site preparation. Your system is ready to install CA CSM.