Introduction › Control Option Entry Methods › The Parameter File

The Parameter File

You can change any default setting to tailor security during the security implementation phase. The default for the MODE option is FAIL.

Once entered into the Parameter File, the initial options become a base or foundation. Although these options can be overridden, CA Top Secret reverts to the options listed in the Parameter File when CA Top Secret is restarted after a shutdown.

Creating the Parameter File

During the installation of CA Top Secret, a systems programmer creates a Parameter File. The Parameter File contains an initial set of MSCA selected control options.

The Parameter File is:

• A standard sequential data set.
• Any number of records.
• Control options are entered into the file without commas or separators.
• To delimit a title or comment statement, use an asterisk.
• Entries begin in column one.

Example: parameter file

This example separates several options that are longer than a single command line:

FAC(TSO=MODE=IMPL,LOG=(ALL)) * TSO DIFFERENCES
FAC(TSO=LOCKTIME=5)
FAC(TSO=NOLUMSG,RNDPW)

Sequential Processing

CA Top Secret processes most of the control options in the Parameter File sequentially. The Global entries must be entered before facility‑specific entries to ensure that the facility‑specific entries take effect.

Place FACILITY modifications after all global modifications:

• MODE
• BACKUP
• NEWPW
• LOG
• DOWN
• FAC(TSO.....)

Example: sequential processing

In this example, CA Top Secret is in WARN mode with TSO in IMPL mode:

* SECURITY CONTROL OPTIONS FOR TEST MACHINE
  MODE(WARN)                     * SELECT PROCESSING MODE
  FAC(TSO=MODE=IMPL,LOG=(ALL))   * TSO IS DIFFERENT
  BACKUP(0400)                   * 4 IN MORNING
  NEWPW(MIN=5,MASK=CVCVCV)       * NEW PASSWORD MASKING

If the FACILITY control option was specified before the MODE option, CA Top Secret would process all requests under the WARN MODE. Regardless of the facility from which the request was entered.

Examples: changing facility names

This example changes a facility name:

FACILITY(USER4=NAME=CICSA)

All subsequent control option entries that interact with the newly named facility must contain the new facility name.

This example changes the name of USER4 to CICSA and forces CICSA to process in WARN mode:

FACILITY(USER4=NAME=CICSA)
FACILITY(CICSA=MODE=WARN)

Given the entries that are shown below, the CICSA facility processes security in WARN mode and contains the NOABEND attribute. More changes must be made to CICSA, not USER4.

FACILITY(USER4=MODE=WARN)
FACILITY(USER4=NOABEND)
FACILITY(USER4=NAME=CICSA)

Important! Only modify the names of USERxxx facilities. Do not modify the names of product‑supplied facilities, except under the direction of CA Top Secret Support.