Previous Topic: EVALMODE—Common Criteria Evaluation ModeNext Topic: EXPDAYS—Security File Expiration Interval


EXIT—Installation Exit

Valid on z/OS and z/VM.

Use the EXIT control option to activate and deactivate the installation exit.

EXIT processing for resource checking requires the RDT attribute EXIT to be turned on for each resource class called the exit. By default the exit is not called for resources in the RDT. For information on the RDT attribute, see the Command Functions Guide.

All entry methods are accepted.

This control option has the following format:

EXIT(ON|OFF)
ON

Causes CA Top Secret to call the installation exit module (TSSINSTX) at all exit control points.

OFF

(Default) Deactivates the installation exit.

Installation Exit

CA Top Secret provides more than 17 control points at which systems programmers might write code to define security‑checking procedures for initiation, volumes, and resources. This installation‑unique code is housed in the TSSINSTX module, which resides in a link‑listed library. CA Top Secret accesses this module and performs all functions and validations. If the EXIT option is not specified, CA Top Secret will assume EXIT(ON) provided that TSSINSTX exists. CA Top Secret ignores this option if no exit code exists.

If the exit abends, CA Top Secret automatically deactivates the exit and attempts to take a system dump.

The site must properly format and assemble the installation exit before it can be activated. A matrix within the exit will indicate the calls that the exit will accept.