Configuring CIA Real-Time Processing for CA Chorus › CIA Real-Time Component Implementation

CIA Real-Time Component Implementation

If a security product database is shared across multiple z/OS images, perform these tasks on each of the z/OS images. Administrative commands, SAF calls, and user login and logoff processes on any of the z/OS images can change information in the security database that is replicated in the CIA repository. The CIA real-time process must communicate all of these changes to the CIA repository.

The CIA real-time component is a started task address space. The address space that reads the update requests from the CIA logstream and communicates the changes to the CIA repository.

The process of implementing the CIA real-time component consists of the following:

• CIA real-time component configuration
  • (Optional) Define the CIA real-time component options
  • (Optional) Allocate the CIASTATS DD output data set
  • (Optional) Allocate the CIAJRNL DD output data set
  • Define the CIA real-time component started task procedure
• CIA real-time authorization
  • AP-authorize library CAI.CAKOLINK
  • Create a control ACID with the following:
    • Unscoped control authority (type SCA)
    • Administrative authorities of DATA(ALL), ACID(DEFNODES), RESOURCE(INFO), MISC5(DCLLIST), MISC8(LISTRDT, LISTSDT), and MISC9(MODE)
    • USS capabilities such as UID, GID or group, home directory, and login shell
    • DSN(TCPIP.) ACCESS(READ)

  Note: Sample JCL member CIARTTSS can be used to create the control acid needed to run CIA real-time.

  • Add the CIA real-time component started task procedure name to the Started Task Command (STC) record with an assignment to the newly created control ACID.
• CIA real-time control options

  Specify the options for the CIA real-time component in the CA Top Secret control options.