z/OS Security Server Support › DCE Security Server Protection

DCE Security Server Protection

To protect the DCE security server under CA Top Secret:

• Add a DCE segment allowing specification of six DCE‑related fields to any CA Top Secret defined user. For example:

  TSS ADD(acid) DCENAME(jordanm)
                DCEFLAGS(AUTOLOGIN)
                UUID(00000075‑71db‑21cf‑b500‑08005a470ba1)
                HOMEUUID(abbc323c‑5ce2‑11cf‑a61e‑08005a470ba1)
                HOMECELL(/.../cis_test1.cis.dog.com)
  

• CA Top Secret extends this support by installing the TSSDCE ISPFEDIT‑macro which can reformat the output of the IBM DCE export utility, MVSEXPT, to TSS format. To perform this reformat, edit the MVSEXPT output data set using ISPF edit and enter the TSO command %TSSDCE. This immediately reformats the MVSEXPT output data set being edited into TSS command format.

For more information, see the IBM DCE documentation for the OE/DCE security server.