Specific Control Options › ADSP—Security Indicator

ADSP—Security Indicator

Valid on z/OS.

The Automatic Data Set Protection (ADSP) control option controls the setting of the security‑indicator (RACF bit) in the DSCB of newly created data sets. If the security‑indicator is set for a data set and a security product is not operating in the system, the data set cannot be opened. For CA Top Secret, if SAF has been initialized, the security product is considered to be operating and the security‑indicator is not checked. For this reason, ADSP(NO) is the recommended setting for this option.

All entry methods are accepted.

This control option has the following format:

ADSP (YES|NO|ALL)

YES

(Default) Security bit is turned ON for defined users operating in non‑DORMANT MODE when any data set is created.

NO

(Recommended) Security indicator is never turned on.

ALL

All entry methods are accepted. The security indicator is turned on in all modes for all users, regardless whether the user is defined to CA Top Secret.

The ADSP control option is not reset to default values when the TSS address space is recycled between IPLs. If ADSP is modified after initialization, that value is preserved across re‑initialization unless explicitly modified in the parameter file.

The TSSPROT utility turns the security indicator ON or OFF for selected data sets. For information, see the Report and Tracking Guide.

Examples: ADSP control option

This example ensures that the ADSP option remains OFF. Place this example in the parameter file:

ADSP(NO)

This example ensures that all data sets for all users, which are defined or undefined, have the security‑indicator set on:

F TSS,ADSP(ALL)