Using the TBESAF99 Utility to Generate Security Profiles › Sample TBESAF99-Generated Control Statements for CA Top Secret › Sample Local Control Statements for CA Top Secret

Sample Local Control Statements for CA Top Secret

The following sample shows a local control statement in TBESAF99 format.

BES2 TYPE=LOCAL,
  CAEKMAPI=PROTECT,
  COMMANDS=PROTECT,
  UTILITIES=PROTECT,
  KEYS=PROTECT

The following sample shows the resulting control statements generated by TBESAF99 for importing into CA Top Secret. It defines a local command protection profile, a local key protection profile, and a local utilities protection profile for BES2.

/*  Define BES2 Local                                      

TSS ADD(PRODDEPT ) CA@BES(BES2.CAEKMAPI.PROTECT) UNDERCUT 
TSS ADD(PRODDEPT ) CA@BES(BES2.COMMANDS.PROTECT) UNDERCUT  
TSS ADD(PRODDEPT ) CA@BES(BES2.KEYS.PROTECT) UNDERCUT      
TSS ADD(PRODDEPT ) CA@BES(BES2.UTILITIES.PROTECT) UNDERCUT