Introduction to User Administration › Plan for Your Administration Group › User IDs and Security

User IDs and Security

Your company has probably already established user IDs for you and the users in your group. The software allows you to define users to the product with the same user IDs they already use. You should also determine what type of security system manages security when the user signs on to the product. If your site already uses RACF, CA ACF2 Security, CA Top Secret Security, or SAF for system security, you can make CA TPX use the same security system.

You can use the product's own security system to manage security. With this security, users determine their own passwords, and the software encrypts and stores them in the TPX ADMIN2 data set. You can also allow a user-defined exit routine to provide protection. See the system administrator at your site about setting up user exits.

If you like, you can specify that users do not have to enter a password when they sign on to the product.

Signon Panels for Passwords and Password Phrases

TPX provides two sets of English signon panels:

• TEN0003 – Userid and traditional password signons
• TEN1003 – Userid and either a password phrase or password signon

A TPX site administrator configures the signon panel by updating the Default LOGO: field on the User Signon panel on the TPX System Options Table Detail Panel (Panel TEN0108).

The TEN1003 panel allows users at customer sites to sign on to TPX utilizing password phrases. The TEN1003 panel requires sites to be use either ACF2, Top Secret or RACF security systems.

CA ACF2 sites have to do the following procedures to use Password Phrases and the TEN1003 Panel:

• CA ACF2 R15 (Z/OS) and CA ACF2 R14 (Z/OS) sites must apply ACF2 APAR RO38461 before attempting to use the TPX Password Phrase interface.
• Use SAMPJ job ACF2PWPH (from the CB0VJCL file) to install ACF2 SAMT entries into the ADMIN1 VSAM file.
• Set Y in the field Allow Lower Case Pswds: on the TEN0090 panel
• Set the size to 208 bytes for Slot Pool 5 for above the line storage on the TEN0103 panel.
• Set field Default LOGO to TEN1003 on the TEN0108 panel

The CA Top Secret sites have to do the following procedures to use Password Phrases and the TEN1003 Panel:

• Set Y in the field Allow Lower Case Pswds: on the TEN0090 panel.
• Set the size to 208 bytes for Slot Pool 5 for above the line storage on the TEN0103 panel.
• Set field Default LOGO to TEN1003 on the TEN0108 panel

The RACF sites must configure TPX to use the SAF security not RACF.

The RACF sites have to do the following procedures to use Password Phrases and the TEN1003 Panel:

• Set Parameter Security System: to SAF on the TEN0090 panel.
• Set Y in the field Allow Lower Case Pswds: on the TEN0090 panel.
• Set the size to 208 bytes for Slot Pool 5 for above the line storage on the TEN0103 panel.
• Set field Default LOGO to TEN1003 on the TEN0108 panel

For more information on the TEN0003 and TEN1003 Signon Panels, see Chapter 2 in the CA TPX™ Session Management Programming Guide.