Defining CICS to CA Top Secret › Facilities Matrix › Defining a New Facility to the Matrix

Defining a New Facility to the Matrix

In addition to the two CICS default facilities, a total of 222 predefined facilities are provided that you can use to define a new facility of your own. Your security administrator can easily define a facility to the Facilities Matrix by:

• Changing the name of one of the predefined USER facilities.
• Modifying the security attributes of the new facility to tailor security processing for that facility.

For example, if you have a region dedicated to CA‑eMAIL+ and you wish to define a unique facility for it, all you need to do is rename one of the available USER facilities, identify it as a CICS‑type region, and establish the initiating program (usually DFHSIP) using the FACILITY control option:

FACILITY(USER1=NAME=EMAIL)

FACILITY(EMAIL=TYPE=CICS,PGM=DFH)

Note: It is recommended that the FACILITY control options be set in the TSS Parameter File at startup; however, alternate entry methods (such as O/S MODIFY and the TSS MODIFY command) can be used.

Other FACILITY control suboptions (for example, MODE, LOCKTIME) can be customized. The effects of such suboptions are described in the Control Options Guide as well as later sections in this guide.

Once the new facility has been defined, the region can be associated with the facility.

Associating a CICS Region With a Region ACID

CICS regions are normally associated with a region ACID. In batch, this association occurs naturally through the regions JOB JCL statement and the USER operand as shown in the example below.

//CICST1 JOB (acct‑parameter),USER=CICST1,...

For a started task, the association is administered through the CA Top Secret STC Table as shown in the example below.

TSS ADDTO(STC) PROCNAME(CICST1) ACID(CICST1)

Associating a CICS Region and a Facility

The association of a CICS region and a facility occurs by adding a MASTFAC parameter to the region ACID as shown in the example below.

TSS ADDTO(CICST1) MASTFAC(CICSTEST)

CICS started tasks that have no associated region ACID and CICS regions that have no associated MASTFAC will default to the CICSPROD facility. However, CA Top Secret recommends that MASTFAC be explicitly employed so that such associations are fully documented.

Note: This architecture allows the administrator to associate regions one‑to‑one or many‑to‑one with facility entries of the Facility Matrix Table.