Security Requirements

When you prepare your z/OS task for startup, the following authorities are required on your system:

If you plan to use ESD to download the product, you require access to UNIX System Services (USS).
You have READ authority to data sets with a prefix of CAI.*.
You have UPDATE authority to the following data sets or libraries:
- Started task PROCLIB that stores the run-time JCL job, for example, SYS1.PROCLIB
- SYS1.PARMLIB
- SYS1.VTAMLST or the library that stores VTAM application definitions and VTAM initialization parameters
- SYS1.VTAMLIB for terminal mode table definitions
- Master catalog, a requirement if you intend to define alias entries for data set prefixes
You have authority to update the following initialization parameter data set members if necessary:
- SYS1.PARMLIB(IEFSSNxx) to add subsystem IDs
- SYS1.PARMLIB(IEAAPFxx) to APF-authorize your load libraries
- SYS1.PARMLIB(CONSOLxx) if your system does not use extended MCS consoles
- SYS1.PARMLIB(LPALSTxx) if you want to use the SOLVE SSI task as the PPI provider
- SYS1.PARMLIB(PROGxx) if you want CA Auditor for z/OS or CA Common Inventory Service to know of your products for your auditors
Ensure that the following conditions are met:
- The user IDs associated with your started tasks have access to the run-time data sets created by the installation and setup processes (UPDATE authority required).
- The user ID associated with the product region started task is authorized to issue system commands.
- The user IDs associated with the product and SOLVE SSI region must have authority to use UNIX System Services.