Configuring Your Product › Update ICSF and the Security System

Update ICSF and the Security System

Updating your security system permissions ensures that your BES and ICSF resources work correctly.

To update your security

1. Update your security system to provide the following:
   • Control access to the PREFIX used for BES databases
   • Update access to:
     • IRR.DIGTCERT.LISTRING (If B2B tapes are to be created.)
     • ICSF CKDS (If you save keys in the CKDS.)
   • Read access to general resource classes:
     • CSFKEYS
     • CSFSERV
2. Define the following ICSF startup parameters:
   • Configure ICSF with parameter SSM(YES)
   • CHECKAUTH(NO) (Recommended for improved performance.)

Note: For more information about resource classes, see the IBM ICSF Administrator's Guide, the IBM Security Server RACF Security Administrator's Guide, the CA ACF2 for z/OS Administrator Guide, and the CA Top Secret for z/OS User Guide