Using the TBESAF99 Utility to Generate Security Profiles › TBESAF99 Utility

TBESAF99 Utility

The TBESAF99 utility is a batch program that generates native security system resource model definitions for CA Tape Encryption resources that the security administrator wishes to have the security system control. This allows the security administrator the flexibility of not having to define individual profiles or rules. TBESAF99 will only generate model definitions for resource protection profiles, commands, keys, and utilities. If you want to use data set selection profiles, the profiles have to be manually defined.

TBESAF99 generates a set of model definitions that you need to edit before updating your security system data base. This allows you to refine the resource definitions and to add additional statements such those that grant access to the resource or resources.

Note: Administrators who are familiar with the control statements for their security system can create control statements without using TBESAF99. These definitions are fixed and not variable and therefore if the elements are not defined in the correct format, security processing might be disabled or a protected default might not be protected.

For a list of supported entities and formats that you can define for your security system, see the appendix “SAF Interface Parameter Reference List.”