Using the TBESAF99 Utility to Generate Security Profiles › Sample TBESAF99-Generated Control Statements for CA Top Secret › Sample Global Control Statements for CA Top Secret

Sample Global Control Statements for CA Top Secret

The following sample shows a global control statement in TBESAF99 format. In this example, the default encryption key of TSSDEFAULT is used to encrypt data sets that are not otherwise specified.

BES 	TYPE=GLOBAL,

SECURITY=TSS,

ENABLED=YES,
CAEKMAPI=PROTECT,
COMMANDS=PERMIT,
KEYS=PROTECT,
UTILITIES=PERMIT,
OWNER=PRODDEPT,
TSSACID=SECADMIN,
TSSSTCACID=STCDEF,    
DEFAULT=(BES=(TSSDEFAULT))

The following sample shows the resulting control statements generated by TBESAF99 for importing into CA Top Secret.

*  BTE TSS Statements                                       
                                                            
*  Define BES Global                                        
TSS CREATE(SECADMIN) NAME('CA Tape Encryption') +           
    DEPARTMENT(PRODDEPT ) PASSWORD(NOPW)
TSS ADD(PRODDEPT ) CA@BES(BES.CAEKMAPI.PROTECT) UNDERCUT 
TSS ADD(PRODDEPT ) CA@BES(BES.COMMANDS.PERMIT ) UNDERCUT    
TSS ADD(PRODDEPT ) CA@BES(BES.KEYS.PROTECT) UNDERCUT        
TSS ADD(PRODDEPT ) CA@BES(BES.UTILITIES.PERMIT) UNDERCUT    
TSS ADD(PRODDEPT ) CA@BES(BES.SECURITY) +                   
    ACCESS(READ) APPLDATA(ACTIVE  )                         
TSS PERMIT(STCDEF  ) CA@BES(BES.TSS.ACID) +
    ACCESS(READ) APPLDATA('SECADMIN')            
TSS PERMIT(STCDEF  ) CA@BES(BES.SECURITY) +      
    ACCESS(READ) APPLDATA('ACTIVE  ')