Multi-System Facility › Security Considerations › VTAM APPLIDs

VTAM APPLIDs

Any VTAM application can establish an MSF session with CA OPS/MVS. Assuming that the correct VTAM protocols are used, nothing prevents another VTAM application from introducing commands (TSO or operator commands) into the MSF by emulating a remote system.

For this reason, it is critical to protect the use of VTAM application names using the PASSWORD operand on the VTAM APPL statement defining each application name.

For this same reason, you must read-protect your VTAM definition library so that unauthorized users cannot read these passwords.