Implementing Security › Administering Terminal Security › Securing z/OS Console Terminals

Securing z/OS Console Terminals

Full security is enforced for z/OS console terminals. Since an explicit signon is not appropriate for z/OS consoles, it is recommended that an ACID (or ACIDs, one for each console) that matches the four‑character CICS terminal ID be created. This allows the CA Top Secret Automatic Terminal Signon procedure to associate the ACID with the z/OS console terminal. It is recommended that an inclusive transaction list containing CEMT (and/or CSMT) be ADDed to this ACID for each CICS facility, as shown below:

TSS ADDTO(xxxx) TRANSACTION(fac,(CEMT))

This prevents a z/OS operator from entering sensitive transactions.