Defining Security Protection Profiles in IBM Security Server RACF › Command Protection Profiles

Previous Topic: Alter Data Set Profile in RACF for Encryption

Next Topic: Define Command Protection Resource Protection Scope and Level

Command Protection Profiles

Use the command protection profiles to control access to CA Tape Encryption system commands. Command protection profiles can be defined by the individual command, at the global or local BES subsystem level (for example BES or BESn) or through the PROTECT or PERMIT scope processing options. Scope protection profiles are defined in CA@BES.

Command protection profiles are composed of two components that must be defined in this order: the BES or BESn subsystem, command name and are defined in the OPERCMDS resource class.

Note: CA Tape Encryption supports the use of generic RACF profiles for key protection. You can define your encryption key profiles as generic or fully‑qualified as required.