Defining Security Protection Profiles in IBM Security Server RACF › SAF Interface Activation (BES.SECURITY) › Deactivate the SAF Interface

Previous Topic: Activate the SAF Interface

Next Topic: Refresh CA@BES Storage Profiles Using RACF and BES Commands

Deactivate the SAF Interface

To deactivate the SAF Interface or prevent the SAF Interface from being activated during CA Tape Encryption initialization or reload processing, the BES.SECURITY control profile must be defined with INACTIVE specified on the APPLDATA field of the RDEFINE command.

To alter the existing BES.SECURITY control profile to disable the SAF Interface

  1. Specify the following definition: 
    RALT CA@BES BES.SECURITY APPLDATA('INACTIVE')

Note: You can dynamically activate or inactivate the SAF Interface by replacing the BES.SECURITY APPLDATA parameter and refreshing RACF and CA Tape Encryption.