Using the TBESAF99 Utility to Generate Security Profiles › Sample TBESAF99-Generated Control Statements for CA Top Secret › Sample Command Protection Control Statements for CA Top Secret

Sample Command Protection Control Statements for CA Top Secret

The following sample shows a command protection control statement in TBESAF99 format.

Note: Command protection statements for CA Tape Encryption console commands are defined in the OPERCMDS resource class and not in the CA@BES resource class.

BES  TYPE=COMMAND,NAME=DISPLAY
BES2  TYPE=COMMAND,NAME=RELOAD
BES7  TYPE=COMMAND,NAME=REFRESH.KEYRINGS
BES7  TYPE=COMMAND,NAME=REFRESH.CAEKMAPI 

The following sample shows the resulting control statements generated by TBESAF99 for importing into CA Top Secret. It defines the DISPLAY commands globally to all BES subsystems, the RELOAD commands to BES2, and the REFRESH=KEYRINGS command to BES7. After the control statements are generated, you must add the appropriate user ID information.

TSS ADDTO(PRODDEPT ) OPERCMDS(BES.DISPLAY) UNDERCUT   
TSS PERMIT(SECADMIN) OPERCMDS(BES.DISPLAY) ACCESS(READ)
TSS PERMIT(user id ) OPERCMDS(BES.DISPLAY) ACCESS(READ)

TSS ADDTO(PRODDEPT ) OPERCMDS(BES2.RELOAD) UNDERCUT    
TSS PERMIT(SECADMIN) OPERCMDS(BES2.RELOAD) ACCESS(READ)
TSS PERMIT(user id ) OPERCMDS(BES2.RELOAD) ACCESS(READ)

TSS ADDTO(PRODDEPT ) OPERCMDS(BES7.REFRESH.KEYRINGS) UNDERCUT   
TSS PERMIT(SECADMIN) OPERCMDS(BES7.REFRESH.KEYRINGS) ACCESS(READ)
TSS PERMIT(user id ) OPERCMDS(BES7.REFRESH.KEYRINGS) ACCESS(READ)

TSS ADDTO(PRODDEPT ) OPERCMDS(BES7.REFRESH.CAEKMAPI) UNDERCUT 
TSS PERMIT(SECADMIN) OPERCMDS(BES7.REFRESH.CAEKMAPI) ACCESS(READ) 
TSS PERMIT(user id ) OPERCMDS(BES7.REFRESH.CAEKMAPI) ACCESS(READ)