CA Tape Encryption Health Checks › TE_VRFY_ICSF_CHECKAUTH@BESn—Verify CHECKAUTH(NO) is Specified

Previous Topic: TE_VRFY_DB_SPACE@BESn—Monitor Key Storage Space

Next Topic: TE_VRFY_KEYS_DB@BESn—Check KeysDatabase StartUp Attribute

TE_VRFY_ICSF_CHECKAUTH@BESn—Verify CHECKAUTH(NO) is Specified

Use TE_VRFY_ICSF_CHECKAUTH@BESn to ensure that your ICSF system is operating with CHECKAUTH(NO) specified.

Default Interval

Every hour.

Exception Interval

15 minutes.

Best Practice

Encryption performance is affected by the ICSF parameter setting of CHECKAUTH(YES). The ICSF CHECKAUTH parameter controls whether or not RACROUTE security calls are made for callers that are in supervisor state or are running in a system key (key 0 - 7). Typically, programs running in supervisor state or in a system key are considered authorized and do not need extra authentication. With CHECKAUTH(YES) the security call overhead for each service call made by CA Tape Encryption to ICSF services significantly degrades performance.

Parameters accepted

None.

Debug Support

Yes

Verbose Support

Yes

Message

BESH0051E BESn performance degraded by ICSF CHECKAUTH(YES) setting.

For more information, see the IBM ICSF System Programmer's Guide, the Configuration Guide and the Messages Guide.