Using Your Security System › The z/OS External Security Manager › CA@BES Resource Class

CA@BES Resource Class

CA@BES is a general resource security class for use with CA Tape Encryption in z/OS environments. CA@BES is the repository for all CA Tape Encryption SAF Interface profiles and processing parameters. The following resources are defined and stored in this class are:

• Data set selection profiles for defining which discrete, generic, or fully-qualified data set names are selected for encryption. The data set selection profile also contains the encryption parameter within the APPLDATA portion of the definition or permit command.
• Encryption key protection profiles for controlling access to encryption and decryption symmetric keys, code book data, and digital certificates data.
• Utility protection profiles for controlling access to who can and cannot perform key maintenance and view sensitive CA Tape Encryption internal data and reports.

Note: The name of the resource class, CA@BES, is fixed and not dynamic. This feature prevents unauthorized users from being able to disable selection processing and prevents the use of parameter override statements when processing tapes for encryption.