Previous Topic: Example: Set Up Security for Restricted Users

Next Topic: Set Up SCS Address Space Security

How to Set Up Security for CA CSM with CA ACF2 for z/OS › How to Set Up SCS Address Space Security

How to Set Up SCS Address Space Security

The SCS address space verifies the user ID assigned to the requesting started task or initiated job and authorizes it to connect.

The security setup that is required for CA CSM is only set up on the driving system. To set up the SCS address space security, do so on every target system, which can include the CA CSM driving system.

Note: An unauthorized CA CSM user ID is denied access to the selected target system.

If security profiles are not defined, CA CSM cannot connect to the SCS address space, including from within the address space.

Configure permission to access the entity SCSAS.CONNECT (READ authority) of the class CAMSM. The permission allows connections to the SCS address space through the CA CSM application server and the SCS address space.

PassTickets are used to verify the started task ID of the CA CSM application server. Verifying the started task ID allows secure connections from a remote system to the address space.

To set up SCS address space security:

  1. Set up SCS address space security.
  2. Configure PassTickets.