Preparing for Installation › Security Prerequisites

Security Prerequisites

Before you install the CA Cross-Enterprise APM, verify these security requirements:

• You can run a batch JCL streams.
• You have READ, WRITE, and ALLOCATE access to the data set prefix or high-level qualifier that is used for the installation.
• You have a user ID with an OMVS segment and UID defined for access to UNIX System Services (USS).
• You have the permission to update and create directories and files in the mount point for the installation.
• If a superuser or a UID(0) rights are not assigned, you require the permission to mount a USS file system.
• If superuser rights are not assigned, you have READ access to the SAF resource SUPERUSER.FILESYS.MOUNT in the UNIXPRIV class.
• The user ID that is assigned to the WILYZOS job has an OMVS segment and UID assigned.
• The WILYZOS user ID has READ access to the high-level qualifier of the installation data set.
• If the WILYZOS user ID does not have superuser rights or is not in the same group ID (GID) as the person installing the software, then CONTROL access to the following SAF resource is required: SUPERUSER.FILESYS in the UNIXPRIV class.
• If the WILYZOS user ID does not have superuser rights, then the ID requires READ access to the SAF resource BPX.CONSOLE in the FACILITY class. Otherwise, the agent issues WTO messages that are prefixed with message ID BPXM023I.
• If PassTicket authentication is required to retrieve metric data from local DB2 subsystems, the WILYZOS user ID must be authorized to generate PassTickets.

  Note: For more information, see the documentation from your security vendor or see the IBM z/OS Security Server RACF Security Administrator's Guide.

  Also, configure the Xnet component of CA Database Management Solutions for DB2 for z/OS to accept PassTicket authentication information.

  Note: If PassTicket support is not configured, specify a valid user ID and password in the agent configuration file. This specification can potentially be a security risk.