TERMINAL Resource Class—Secure Terminals

Resources › TERMINAL Resource Class—Secure Terminals

TERMINAL Resource Class—Secure Terminals

Valid on z/OS, z/VSE, and z/VM.

Use TERMINAL to secure terminal IDs and PCs used to access the mainframe.

The TERMINAL keyword is used to establish access authorizations and restrictions.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid)TERMINAL(terminal)

Prefix length: One to eight characters
Capacity of list: One to eight prefixes per TSS command

Terminal restriction is used to restrict Automatic Terminal Signon ACIDs from being used at another terminal.

This keyword is used with:

The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOHAS, and WHOOWNS
The TERMINAL ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
The TERMINAL ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
TERMINAL(OWN) authority to ADD or REMOVE terminals from ACIDs
TERMINAL(XAUTH) authority to permit or revoke access to TERMINALs

The administrator can use any of the following methods to control access to TERMINALs: Expiration, Facility, Time/Day, and Actions.

Note: All terminals is protected by setting DEFPROT on the resource class TERMINAL.

Defining Terminals

This section details the options for defining terminals

Terminal Definitions for z/VM:

The following table provide instructions and examples on how to specify prefixes for z/VM:

Type	Prefix	Example
Locally attached	GRAF plus four‑character local address	TSS ADDTO(BUDDEPT) TERMINAL(GRAF02BA)
Remotely attached VM‑controlled network terminals	NETW plus four‑character resource ID	TSS ADDTO(CORP) TERMINAL(NETW0301)
Logical devices	LDEV plus four‑character address of logical device which is arbitrarily defined.	TSS ADDTO(CORPNET) TERMINAL(LDEV1234)
VTAM/SNA	Eight‑character LU name	TSS ADDTO(FINDEPT) TERMINAL(xxxxxxxx)

Note: The four‑character address for logical devices is arbitrarily assigned by CP when a product such as VM/PASSTHRU or CA Vterm® requests such a device. 'LDEV' is the only practical prefix when specifying a logical device with TSS ADDTO or PERMIT.

Terminal Definitions for z/OS

The following table provide instructions and examples on how to specify prefixes for z/OS:

Type	Prefix	Example
JES Readers:	This keyword uses names known to JES, as the following entries show.	n/a
RJE	REMOTE #@ READER# Rnn.RDnn	TSS ADDTO(BUDDEPT) TERMINAL(R12.RD1) Assigns remote 12, reader 1 to the Budget Department
NJE	Symbolic Name Node # @ Remote # Nnn.Rnn	TSS ADDTO(CORPNET) TERMINAL(PHILA) TSS ADDTO(CORPNET) TERMINAL(N2.R4)
Local	READER1	TSS ADDTO(CORPNET) TERMINAL(READER1)
Terminals	This keyword uses the name known to TCAM or VTAM via TP monitor definitions. ALL	To protect VTAM terminals (cluster name TSONxxx), enter: TSS ADDTO(CORP) TERMINAL(TSON) To allow a user to access all protected terminals, perform the following: 1. Assign ownership of ALL to the MSCA: TSS ADDTO(MSCA) TERMINAL(ALL) 2. PERMIT the user to access all terminals: TSS PERMIT(user) TERMINAL(ALL)

Terminal Definitions for PCs

The following table provide instructions and examples on how to specify prefixes for PCs:

Type	Prefix	Example
PC	Eight‑character LU name	TSS ADDTO(DEVDEPT) TERMINAL(xxxxxxxx)

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid)TERMINAL(prefix(es))

Prefix length: One to eight characters
Capacity of list: One to eight prefixes per TSS command

Examples: TERMINAL resource class

This example gives the Finance Department, (FINDEPT), ownership of a local terminal in the personnel office (address K61L1234):

TSS ADDTO(FINDEPT)TERMINAL(K61L1234)

This example removes ownership:

TSS REMOVE(FINDEPT)TERMINAL(K61L1234)

This example permits all users connected to the PAYROLL profile (PAYPROF1) access to a local terminal in the personnel office (address K61L1234), from 7:00 to 11:00 am:

TSS PERMIT(PAYPROF1)TERMINAL(K61L1234)TIMES(07,11)

This example revokes access:

TSS REVOKE(PAYPROF1)TERMINAL(K61L1234)