Interfacing with External Security › PassTicket Configuration › Sample: Use CA ACF2 to Configure CA SYSVIEW for CA Insight DPM for DB2 PassTickets

Sample: Use CA ACF2 to Configure CA SYSVIEW for CA Insight DPM for DB2 PassTickets

You can use CA ACF2 to configure specific CA SYSVIEW for CA Insight DPM for DB2 component PassTickets for validating access.

Note: These examples are provided as a guideline. Only a security administrator familiar with PassTicket configuration should execute this process. For detailed information about using these commands, see the CA ACF2 for z/OS Administration Guide.

Example: Use CA ACF2 to Configure PassTickets for CA SYSVIEW for CA Insight DPM for DB2 Systems.

Follow these steps:

1. Define the application session keys by entering the following commands:

   SET PROFILE(PTKTDATA) DIVISION(SSIGNON)
   INSERT xnet_applid SSKEY(0123456789ABCDEF)
   F ACF2,REBUILD(PTK),CLASS(P)
   

   xnet_applid

   Defines the application ID used for the PassTicket validation. This value is specified in the CA DB2 Tools Xnet INITPARM data set parameter PASSNAME and subsequently in the CA SYSVIEW DB2 PARMLIB XNET-PassTicketApplId parameter.

   SSKEY

   Defines an encryption key for the application using values that are different from the values in the sample syntax.

   Note: The sample syntax demonstrates a complete key value of 16 hexadecimal digits (creating an 8-byte or 64-bit key). Each application key must be the same on all systems in the configuration and the values must be kept "secret."

   The CA Insight DPM for DB2 (CA DB2 Tools Xnet) session keys are defined.

2. Permit access to the xnet_applid application for each user that is allowed to access the CA Database Management Solutions for DB2 for z/OS (CA DB2 Tools Xnet):

   Note: Complete this step only if you have already defined the xnet_applid application resources. If you inserted a GSO CLASMAP record to change the type code for the APPL class to APL, use APL instead of SAF for TYPE in the following commands.

   ACF
   SET RESOURCE(SAF)
   RECKEY xnet_applid ADD(useridn UID(uid-of-useridn) SERVICE(READ) ALLOW)
   F ACF2,REBUILD(SAF)