CA Identity Governance Client Tools Guide › Import and Export › Import from TSS

Import from TSS

CA Top Secret (TSS) is a security component for IBM mainframe computers that works together with the existing operating system to provide system security, resource access control, auditability, accountability and administrative control. As such, it is the main repository for users, roles and resources data on mainframe computers.

The main input to the CA Identity Governance TSS import option requires downloading access data from TSS using the by generating a TSS List File, and transferring the generated text file to a location on the Windows system to which CA Identity Governance has access. There is also a possibility to add enriched data about users attributes (for example, from the human resources department database).

The output is a CA Identity Governance configuration, with TSS profiles appearing as CA Identity Governance roles and with TSS groups appearing as CA Identity Governance resources.

To import data from TSS into CA Identity Governance

1. Create a TSS List File on the mainframe and transfer the file to a location that can be accessed by your Windows system.
2. Click Import, Import from TSS.
3. In the Files section, browse to set the pathnames of the data files that receive imported data.
4. In the Options section, specify import options. The following fields are not self-explanatory:

   Add ACL Entities

   Specifies if CA Identity Governance processes Application Control Language (ACL) scripts during import.

   Input HR file

   Specifies the pathname of the file containing supplementary user data, if any.

5. Click Convert to import.

   If any errors result from the import process, then a CA Identity Governance message appears.

6. Check any errors in the SageTSSConverterXXX.log file located in the CA Identity Governance Logs folder.

   The configuration is created in the target folder but is not automatically opened by CA Identity Governance.