Specific Control Options › TSS—Console Prompts

TSS—Console Prompts

Valid on z/OS.

Use the TSS control option to generate prompts at the operator console for the operator to enter emergency CA Top Secret commands. Commands entered using this method are audit events and are recorded. To avoid flooding the console command output is limited to 50 lines.

To protect secure data from being posted on the system, log command output is routed to the console only. Command input requires the entry of the MSCA previous password at the console. To avoid security exposure, end the session after the needed commands are complete.

All entry methods are accepted.

This control option has the following format:

TSS

Protection

The TSS control option is protected by a special prompt for the MSCA's previous password. A record of the event is recorded to provide an audit trail.

TSS Command Entry

This command is designed mainly for entry from the system console:

F TSS,TSS

However, it may also be entered as a command:

TSS MODIFY(TSS)

or from PARMLIB:

TSS

An operator console prompt requests the MSCA previous password:

TSS9273A ENTER TSS COMMAND PASSWORD

After successful entry of this password, a second prompt allows the entry of any CA Top Secret command:

TSS9690A ENTER <TSS COMMAND> OR <END>

The command is entered as a console response, including the initial TSS keyword.

Example: TSS control option

This example enters a TSS command function at the O/S console:

1. Enter:

   F TSS,TSS
   

   The system displays:

   TSS9691A ENTER TSS COMMAND PASSWORD
   

2. Enter the MSCA's previous password:

   R xx,password
   

   If this password is correct, the system displays:

   TSS9272A ENTER <TSS COMMAND> OR <END>
   

3. Enter the TSS command function:

   R xx,TSS ADDTO(USERO1) DSNAME(ABC.DEF)
   

Note: If this command is entered from anywhere else but the O/S console, a prompt at the console awaits a response.