Specific Control Options › BACKUP—Backup the Security File

BACKUP—Backup the Security File

Valid on z/OS and z/VM.

The BACKUP control option:

• Immediately backs up the Security File
• Selects a time for an automatic daily backup
• Deactivates the automatic backup

All entry methods are accepted.

Note: The MODIFY command can be used to override the entry in the Parameter File if BACKUP is set to OFF. This option only works if the Backup DD card is included in the start JCL.

This control option has the following format:

BACKUP blank|(hhmm)|(OFF)

blank

If the backup DD statement is in the CA Top Secret STC procedure, CA Top Secret immediately backs up the Security File.

hhmm

If the backup DD statement is in the CA Top Secret STC procedure, CA Top Secret backs up the Security File at the time specified.

Default: 0100

OFF

CA Top Secret discontinues automatic backup of Security File. CA Top Secret must be restarted to reset BACKUP(OFF).

Use of BACKUP Option

Use of the BACKUP option is contingent on two factors:

• BACKUP is available only if the BACKUP DD statement is entered into the CA Top Secret started task procedure.
• The Backup File must be exactly the same size as the Security File.

When CA Top Secret Will Not Perform BACKUP

CA Top Secret will not back up the Security File on the same day that CA Top Secret is started, unless it is started BEFORE any scheduled backup time.

Multiple CPUs

It is only necessary to perform backup from one CPU in a multiple CPU environment. The site needs only activate backup through one CPU's CA Top Secret Parameter File or STC procedure. Multiple backups are redundant, and do not occur simultaneously due to device locking.

D37 Abends

D37 abends during backup indicate that the Backup File is too small. Recreate the Backup File according to instructions in the Installation Guide.

Recommended Use

Security administrators use the automatic backup feature to protect the Security File. To use the backup feature, the security administrator or programmer must first create a backup file on an alternate DASD volume. Place this Backup File on a different string with a different control unit than the primary file. This file placement ensures that the Backup File is available in the event of a hardware failure. This Backup File is a copy of the Security File, and as such it must be considered a sensitive, high‑risk data set.

Examples: BACKUP control option

This example automatically backs up the Security File at 2 a.m:

BACKUP(0200)

This example immediately backs up the file:

F TSS,BACKUP