Defining Security Protection Profiles in CA Top Secret › Utility Protection Profiles for CA Top Secret › ADDTO Command to Control Utilities Globally or Locally in CA Top Secret

ADDTO Command to Control Utilities Globally or Locally in CA Top Secret

Use the ADDTO command to define a default utilities protection profile to CA Top Secret for all eligible CA Tape Encryption utilities. You can specify this profile globally for all BES subsystems or locally for a specified BES subsystem.

This command has the following format:

TSS ADDTO(department) CA@BES(BESn.UTILITIES.permissions)

TSS

Indicates a CA Top Secret command.

ADDTO

Specifies the ADDTO command. The short form of this command is ADD.

department

Specifies the department name that owns the BES resources.

CA@BES

Specifies the general resource class for CA Tape Encryption. This is always CA@BES for default utilities protection profiles that apply to all eligible utilities.

n

Indicates the BES task number. If you specify BES with no subsystem identifier, the profile applies to all BES subsystems.

UTILITIES

Specifies that this statement defines the default utilities permissions for the specified BES subsystem.

permissions

Specifies the permission setting. Options for this parameter are as follows:

PERMIT

Specifies that all the eligible utilities are permitted.

PROTECT

Specifies that all the eligible utilities are protected.

Example: Define and restrict utilities globally on all BES subsystems for CA Top Secret

This example defines a global utilities protection profile to CA Top Secret for all eligible utilities for all BES subsystems, indicated by BES with no subsystem identifier, and restricts all users from running these utilities, indicated by UTILITIES.PROTECT. These restrictions can be overridden by a permit option specified for a particular BES subsystem or a particular utility.

TSS ADDTO(DEPT01) CA@BES(BES.UTILITIES.PROTECT)