Keywords › MASTFAC (z/VM) Keyword—Associate Virtual Machine to a Facility

MASTFAC (z/VM) Keyword—Associate Virtual Machine to a Facility

Valid on z/VM.

Use the MASTFAC keyword to associate a virtual machine, which is issuing security validation requests via the Application Interface, to a unique facility.

The facility name used as an operand for MASTFAC must be defined to CA Top Secret in the systems Facilities Matrix. For information on the FACILITY control option, see the Control Options Guide .

This keyword has the following format:

TSS ADDTO(virtual machine acid) MASTFAC(facility)

This keyword is used with:

• The commands CREATE, REPLACE, ADDTO, and REMOVE
• The user ACID type
• MISC9(MASTFAC) authority

Examples: MASTFAC keyword

In this example a disconnected service machine called SERMACH processes requests on behalf of other users. A security interface within SERMACH validates those user requests. This example indicates that security calls originating from the SERMACH machine are processed using a facility called SERFAC:

TSS ADDTO(SERMACH) MASTFAC(SERFAC)

This example assumes the administrator had created an ACID called SERMACH and had defined a facility called SERFAC within the CA Top Secret Facilities Matrix.

This example removes the MASTFAC keyword from the ACID:

TSS REMOVE(SERMACH) MASTFAC(SERFAC)