Previous Topic: Create the Security FileNext Topic: Implementing MLS


Increase ACID Size

Depending on the security policy implementation and required level of protection, certain ACID records might reach the maximum size, at which point administrators cannot add attributes and properties to the records.

You can increase the maximum size of organizational ACIDs or increase the maximum size of all ACIDs. Increasing the size limit avoids the need to redesign the security implementation.

Note: This change can be implemented one security file at a time, does not affect the size of the security file, and does not affect system performance.

Follow these steps:

  1. Allocate a new security file and include any of the following entries:
    MAXACIDSIZE=nnn
    
    nnn

    Specifies a value between 256 and 512 that allows all ACIDs to reach a size of more than 256 KB (up to 512 KB). Existing ACIDs do not automatically increase to the new size. However, any existing ACID that reaches the current limit increases to the new maximum size.

    ORGACIDSIZE=nnnn
    
    nnnn

    Specifies a value between 513 and 1024 that allows department organizational ACIDs to reach a size of more than 512 KB (up to 1024 KB). Existing department organizational ACIDs do not automatically increase to the new size. However, any existing department organizational ACID that reaches the current limit increases to the new maximum size.

    Important! Use this parameter only if you must support an department organizational ACID size that is greater than the MAXACIDSIZE value. CA Top Secret ignores any ORGACIDSIZE value that is less than the MAXACIDSIZE value.

    The product allocates the file.

  2. Issue the following command to back up the security file immediately:
    TSS MODIFY BACKUP
    

    The product copies the current contents of the primary file into an existing backup file.

  3. Run the TSSXTEND utility to copy the current backup security file to the newly allocated file.

    The product copies the file. Increased ACID size is now available.