Implementing Security for IMS › IMS to CA Top Secret Definition › Define IMS as a Batch Job

Define IMS as a Batch Job

To define the IMS control region to CA Top Secret as a batch job, enter:

TSS CREATE(IMSCACID) TYPE(USER)
                     NAME('PRODUCTION CNT IMS')
                     DEPARTMENT(dept)
                     FACILITY(BATCH)
                     MASTFAC(IMSPROD)
                     PASSWORD(pwd)
                     NOLCFCHK (NOSUBCHK]

Notes:

• The ACID is created with FACILITY(BATCH) to allow execution as a batch job
• The department must already exist
• When users sign on to the control region, they must be associated with the same facility as the MASTFAC associated with the ACID of the control region.
• If the MASTFAC keyword is not specified, the facility used defaults to IMSPROD.
• Protected data sets and other resources opened by the control region must be permitted to the ACID.
• The IMS control region must be defined to CA Top Secret with an ACID that has the NOLCFCHK attribute.
• If the control region uses the spool interface to submit jobs, the control region ACID must have cross-authorization for any ACID used in the submitted jobs. To bypass this requirement, specify the NOSUBCHK attribute for the control region ACID.
• Code the USER=acid keyword on the batch job card, then submit the necessary JCL. Using a password is desirable for batch submission of a control region.